last executing test programs: 28.806063277s ago: executing program 1 (id=6018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0xf, 0x2, 0x2, 0x4, 0x0, 0xa2f9, 0x42080, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x1, 0x50b8, 0x7, 0x1, 0xfffffffffffffffa, 0xffffffff, 0x100, 0x0, 0x401, 0x0, 0x1000}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) close(r2) r3 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$inet(r3, &(0x7f0000002940)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}, 0x20000041) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() gettid() sendmsg$unix(r4, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=ANY=[], 0x88, 0x4040040}, 0x40c0) syz_clone(0x10021400, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x4}, 0x21, 0x0, 0x0, 0x4, 0x9, 0x7f7fffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0xa, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) 26.268355049s ago: executing program 0 (id=6021): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x10, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0x9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0900000000000000000000f8ffffff00000000f320cd554ad128ed7a99c3783b65e5a4c262d658a278f51c74d408fd1070ea608d29", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000400"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000003b00)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES64=r0], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x10, 0x0, &(0x7f0000000200)="0000000000000000000000000000a7c0", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x57, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r4}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001dc0)=""/4070, 0xfe6}], 0x1}, 0x20000000) recvmsg$kcm(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000ff03000000000000", @ANYRES32=r0, @ANYBLOB="72883d4100000000000000000000000000000000175731f68a6c24fa0f2882861516c9ed14641c3adff8eee76075faf55e16a0738dacf8e96e477fb32035469eabb00940d5af855084a82f2081bc4b8e60b4340004b4c6fa18f518aa", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="01000000000000000100"/28], 0x50) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x67, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x11, 0x29, 0x3e}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x14, 0x91, 0x3, 0x3, [{@multicast2, 0x10000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @timestamp={0x44, 0x28, 0xe9, 0x0, 0x7, [0x9, 0x9, 0x8, 0x0, 0x7, 0x7, 0x5, 0x6, 0xb392]}, @ssrr={0x89, 0x7, 0x4b, [@remote]}, @timestamp={0x44, 0x28, 0x4a, 0x0, 0x0, [0x3ff, 0x20050e28, 0xed, 0x5f, 0x80000001, 0x140000, 0x7, 0x5, 0x4]}]}}}], 0xb0}, 0xff00) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0x1}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0x2}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x80}, {0x6, 0x0, 0x0, 0x4}]}) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f00000011c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x1f4, 0xfffffffffffffce6, 0x0, &(0x7f0000000100)="ff412f66b0833efc792e968781", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) r11 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r11, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) 26.044785205s ago: executing program 1 (id=6023): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x6de, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x10}}], 0x10}, 0x102) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 25.732447822s ago: executing program 2 (id=6025): socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) (rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0xb25, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) socket$kcm(0x29, 0x5, 0x0) (rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x18, &(0x7f0000000a00)=ANY=[@ANYBLOB="05574000010100001800000000000000000000000500000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000aafe00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000000000006f19"], &(0x7f0000000380)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x60}, 0x94) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x1, 0x2b, 0x0, 0xc, 0x2}]}, {0x0, [0x61]}}, 0x0, 0x27}, 0x28) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)) (async, rerun: 32) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x8000032, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x2cd, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 64) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) (async) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) (rerun: 64) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) 25.704364243s ago: executing program 0 (id=6026): r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xb7, 0x4, 0x8, 0x7, 0x0, 0x1, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp, 0x2020, 0x1, 0xfffffffa, 0x7, 0x2, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0xab65}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000010c0)=@o_path={&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f00000014c0)={&(0x7f0000001140)=@rc, 0x80, &(0x7f0000001480)=[{&(0x7f00000011c0)=""/31, 0x1f}, {&(0x7f0000001200)=""/255, 0xff}, {&(0x7f0000001300)=""/224, 0xe0}, {&(0x7f0000001400)=""/76, 0x4c}], 0x4}, 0x100) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000019c0)={0xffffffffffffffff, 0x58, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000001a80)={&(0x7f0000001500)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001540)="e356d67a1f1e06164028009de42feca9f6ac831194400e0bf5c149d721be5ba06d40fcc6d98d5830aafd8056e67de994a9702a2d5f51ded8583ecb68c633f8b1403303a38529d43e6d9717d66772", 0x4e}, {&(0x7f00000015c0)="9a032ee128b25eb7141f2ee3586b4add9dddeb22b58f423c49fb0db7ca02c103f6b59df3fb91635af22ed7b6c048888bf753b526f3c7d24b1c3f4cca90fb1b4708f4885f47f6c4fcd7155d7e6839f77c58f996b6", 0x54}, {&(0x7f0000001640)="516f77f5cb3bd2712b40e5b817d769cc48897cbf4ee86a5bd358524952b0f42fcaf0739a467333c15bb00c206d2c147765fe561ab2b802802b96fc0570e072f645601702c9dbfb00e046f12fc8bbfda98a8844d5878d1e0ca1cf13da5ea64a84553c684426cc46bfef5c68a5bb66b8ac9dcafea2a9adeb5143064bc04c7e81", 0x7f}, {&(0x7f00000016c0)="2aeea67d8139af19c03cbfc369f6ba1f45c0eb983bae4ac038f1cadc0932365fb9c9de0981b8acf3bf9460279068afa1b8453c4e79ea679cffa4b31689e8a6cb2d04ef106d96ca9eeb01c38961158dc8606fcee0c3911cbfa2051bd620c550225633fc676b75354f9de18f34967b8406411081b2c5d6c816ca797a5e73cd7b4ed1de29380b35e3b315ad156f3fa7aa6563006c6cc27a957bbdd3c4ddbbe1ffe7cd7afbec0707253f4111b24338c58f049d3547106a52a833a212dab0e7dd3072d59791be12a32058a3a2a9389c9b7c6072e6a16a6f85058610552031183c56", 0xdf}, {&(0x7f00000017c0)="0a1716138d58a227b3b700de6386eb51b3b1f382cdfbb9dbc1c203ff9722e36ebead0a3b8c81a063fc27d67953a5a1295e905e6bc6fb3194be085746fac6a1d09dc32348ce0a3e23e84c90c466aa8974381657650e826edeb3663ed091af3e9d7429f77096ebae94e5c2227fa9f0a24ec34bb1dbd7c764c58f1bba0c120e1e46ecb8746d0247ed0156f9ae79031b8a1c66f519aba838f3220a637203129bdca88228981a70cc44aba12cbc2ae19b7cb4369582e9d3c09e3763a5b27bf0a5731aca6f2ec6714b18b0ce564115d32dbe843a447492fe79f468047a1584e1ce5167c5422cb15a9dbb0159d074e4b546", 0xee}], 0x5, &(0x7f0000001a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x94, 0x5, "2607d5"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x80}, 0x1) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001ac0), 0x4200, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000001b00)={'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) (async, rerun: 32) r5 = openat$cgroup_ro(r4, &(0x7f0000001b40)='blkio.bfq.idle_time\x00', 0x0, 0x0) (rerun: 32) r6 = perf_event_open(&(0x7f0000001bc0)={0x2, 0x80, 0xb, 0x6, 0x3, 0x3, 0x0, 0x8, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000001b80), 0x1}, 0xc06, 0x7f, 0xfffffff9, 0x6, 0x3, 0x10000, 0xf3bd, 0x0, 0x10000, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0xc, 0x10, &(0x7f0000001c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @generic={0x9, 0x8, 0x2, 0xf000, 0x8}, @exit, @ldst={0x2, 0x2, 0x3, 0x3, 0x3, 0xfffffffffffffff4, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}]}, &(0x7f0000001cc0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000001d00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001d40)={0x2, 0x7, 0x3, 0x6}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={&(0x7f0000001e40)="983b1524d1c48b6d91432989164004b9b46b6a02976969610387207b7edec10d4cd7f786289dc78816af092753d45525617f11729b55c30f3270378cedcd6406ec23ccb3b7be2ae38b966017beaf02099232e12aa73cd8769b17100c4990eefb251d6c772a612e293ecb", &(0x7f0000001ec0)=""/7, &(0x7f0000001f00)="dc922c6baf5ecbf1cab0290800b32f43d51781c25d0eb25efa330491e3767eec8f2b1b0000ba5b7b921c4308ef64bb718a1c09834c33242f730d63bb7b76d835", &(0x7f0000001f40)="042fc44c53156ea1b191c5e7207223f2ee5ec464a8b9cd733411653c05eed5a4b28f99a50a72308298511a62228382943457ac2225293f09f02141271252287d2fe3974f87e92f13e7f2b0b2624a18f65f14c5ed050868557a4972908c3e1e096a5e361319e3bd74726a20da800506b53e7777ff2f2310d34ce476e6aece7a7e38faf8fbe54220485ef16308c211812272a69cf8058b845922d559786284ea34630852c6e7fbd03e82009ef8c6099070ba555787359dc8d93dec889d29c94d893a7b9a", 0x1, r5}, 0x38) (async, rerun: 64) ioctl$TUNSETLINK(r5, 0x400454cd, 0x311) (rerun: 64) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x10) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000002080)) (async) r8 = gettid() (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000020c0)='./cgroup/syz1\x00', 0x1ff) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002400)={r5, 0x20, &(0x7f00000023c0)={&(0x7f0000002300)=""/4, 0x4, 0x0, &(0x7f0000002340)=""/82, 0x52}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x10, 0x1d, &(0x7f0000002100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffff53}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x7, 0x0, 0x3, 0x1c, 0x1, 0x40, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002200)='syzkaller\x00', 0x19, 0x58, &(0x7f0000002240)=""/88, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, r5, 0x8, &(0x7f00000022c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, r7, 0x4, &(0x7f0000002440)=[r5, r5, r1, r5], &(0x7f0000002480)=[{0x3, 0x2, 0xf, 0x1}, {0x2, 0x1, 0x9, 0x1}, {0x1, 0x4, 0x8, 0x8}, {0x3, 0x2, 0x3}], 0x10, 0xffffff81}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000003580)=@o_path={&(0x7f0000002580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, 0x4000, r2}, 0x18) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003840)={r10, 0x0, 0xd7, 0x47, &(0x7f00000035c0)="ddbaa8288ad913022fa7046e3c3bada3149f97c5759d865eb2e6b20a7f24efdc9b900a28cf025c646480f9ceaad32866ccf1fdb4a30d7a63cf4c2526e6f9b097d1dd5972782a57f7e75956fa7748c2a91472a617e7663ea05875216d8d9785942361b50e40ef9b85a3b07a15e3fb1a07106ffddfead8b6c680c7d004ffede8720111386d414cf199e2a1cfb1abb5f12749e47790f782a1796183a2a2b2ac8d67158af0460ac1dac400a5f683d430ead309a2490a2c6f964d9a33517761714cd1fca5cf70e7783a32b09e64ae4eb45a519cf88d62c768cb", &(0x7f00000036c0)=""/71, 0xffff, 0x0, 0x45, 0x59, &(0x7f0000003740)="5f2db43f45c62dadd1d12cf101a48ca136896df2daf29a6ad0b6449f841b8d9b0f7d3a436aac17e75c6fcdd772b58ad76e44651a4a67d24a7b95d4b7455670e50afeab07d9", &(0x7f00000037c0)="a2919ca423eae43a81d604c3c234e31ae726de0bcc58ce7b983ae621ca9136f96b50b66e15c5b0f5a2f93b3cf491f75f7e8e37a0edce6fc8681d40137013eb7d452d4622425267b9d1bdd6da9d467763525807a7c3a7d4af01", 0x6, 0x0, 0x7}, 0x50) (async) r11 = openat$cgroup_procs(r5, &(0x7f00000038c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000003900)=r8, 0x12) (async) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000003940)=0x1) r12 = perf_event_open(&(0x7f0000003980)={0x1, 0x80, 0x80, 0x7, 0xb, 0x9, 0x0, 0x5, 0x80000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x9}, 0x48, 0x80000000, 0x0, 0x9, 0xf, 0x3, 0xc, 0x0, 0xffff, 0x0, 0x467}, r8, 0xc, 0xffffffffffffffff, 0x2) r13 = perf_event_open$cgroup(&(0x7f0000003a00)={0x0, 0x80, 0x0, 0x7, 0x5, 0x7, 0x0, 0xf97, 0x8, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff2, 0x4, @perf_config_ext={0x1ab6, 0x1}, 0x800, 0x5, 0xbb, 0x4, 0x4, 0x3, 0x401, 0x0, 0x7, 0x0, 0x9}, r5, 0x1, r6, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r12, 0x2405, r13) close(r0) write$cgroup_freezer_state(r5, &(0x7f0000003a80)='FREEZING\x00', 0x9) 25.609941055s ago: executing program 1 (id=6027): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x4f, '\x00', 0x0, 0x24}, 0x94) 25.574514446s ago: executing program 2 (id=6028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 25.564369336s ago: executing program 1 (id=6029): bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$kcm(0x10, 0x400000002, 0x0) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xd, r0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x8}, 0x3004, 0xc78, 0x0, 0x0, 0xfffffffffffffffd, 0x7fd2, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1000000000000000, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x80000}, 0x59}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x18000000000002a0, 0x44, 0x0, &(0x7f0000000500)="b90103600040f000009e0ff008001fffffe1000040004d3277fb86dd00017f02832d3b54e8744b6442a9693e346991a80caed594eb8820d74c376de64883644b6750d299", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x306) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r8, &(0x7f0000000240)="d191ae537f9de6347a039f39e8154eeb7f3c7d69753402e7248f903205afa69b56b768f7158a14fdb3320f6f12873dd27ba136bbb681d915e612a43f540984b48eb94e03b723fefe1f4a2f66ae3ee3b7c07f316a18e55a637760de15c307bb4b20", &(0x7f00000002c0)=""/180, 0x4}, 0x20) 25.493813958s ago: executing program 0 (id=6030): r0 = socket$kcm(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="1100000000000000004003000100"/23, @ANYRES32=0x0, @ANYBLOB="ac1414bbe000000100bef35f0000001c00000000faffffff068f0208000000ed75bb282e1e9d90eba48f5120c61c254e303281bdcf93b529fc", @ANYRES32=0x0, @ANYBLOB="a005000000000000000000002400000000"], 0x98}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0xffffffffffffff12, 0x7, 0xff, 0xfa, 0x7, 0x0, 0x800ea, 0x102d0, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x7, 0x6}, 0xc001, 0x10040, 0xfffffffc, 0x4, 0x10001, 0x3, 0xa33, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305828, &(0x7f0000000040)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f00000007c0)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000ac0)="f40009f6052b8825fe800400921d16b2081438378e831b76bdd4d5fefcc51d950370d0d5367720903ca93026", 0x2c}], 0x1}, 0x20040000) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305829, &(0x7f0000000040)=0x20000) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7e93, 0x954b, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x20000076, 0x1}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x4, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000001ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0000000000000002", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000f2ffffff000000000000000000000000000000000000000069442753f8baaaebdb884cccca05a3cc60f62da557f714cf7faa36d255af6c8a13306439927c8dd43736625d366997ca4e9cee0f5361e256e87dfe843d73c10d9945110b4b773b4f7eb3a5231245bf7ff335ceaed36a74242d8b2db210890d05105818664980c524f2"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.360295911s ago: executing program 2 (id=6032): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xd, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180800000500000000000000000000001800000000000000000000000000000095c65e6f825203add30eaf946c39acc7c34403a5102a87f94c04772a5ba1bdbdd039f1bb86a6c5de7bd454b18f72497212f62a3b8f88c06c166942409a5d311c69a76418a4920be45567924e1902c33a64090c9085ce3d370e73ecd50d18abe597a4c409fd12d40eeee5a9002d465eb9e6ae13ae4f086f2951f1b5458f0e86e7c6a465e71be7e6e399093a2540dc3f2db7544a32ab3aa5"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0xfffffffffffffe5d) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x101d0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5d31, 0x2840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) socket$kcm(0xa, 0x4, 0x0) socket$kcm(0x2c, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 25.194016856s ago: executing program 3 (id=6033): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='memory.swap.current\x00', 0x26e1, 0x0) close(r1) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b33, &(0x7f0000000000)={'wlan1\x00', @dev}) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="d800000019007b18e00212ba0d8105040a601100fe0f040b067c73a1bc0009001e000500000000001500150005000000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbecbf29d746e7372f2a00001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 25.192829576s ago: executing program 0 (id=6034): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) openat$ppp(0xffffffffffffff9c, 0x0, 0x121001, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x10043, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, 0x0, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x22, &(0x7f0000000200), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x19, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000022fe2e377b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000000)=ANY=[]) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230007) close(0x3) r9 = syz_clone(0x4000000, &(0x7f0000000580)="f23f65eb31588bd21a197183f403d07d96113e283ae1ce8b53ef370e232b882880befb058360864ee23bdd7237fbfea40c8121b4c7c6397b0e9928ca4ed75581e0d5312f3a7fbe32ecafd3a2e7be2e7b1957c7f3437317d87c4c690522583b1385ece4dad120b99d3d3c56c26f20557352b008bad680e15eff7874bf37beca8a41ac900d454dcae3f5b513a5cff7e7112d820c7822e733fe9419c0233ccb9e2ec78fec9b6cf3a03de446f92b65d44118bff62f08cd8e425fa20c4588ac8a6d4f13a4055ad29722db26af895398583b66816f71846fcc0ebde9d482e743fcc3e0", 0xe0, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2c0000000}, 0x115905, 0x2000004, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{}], 0x1}, 0x480c0) 25.134120677s ago: executing program 1 (id=6035): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x22, 0x2, 0x21) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x2}, 0x5000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg(r3, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0xc001) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff, r2}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)="d8d4e3660df71ff16c4eb314096af5646a438d10bd4ae1b196e8083edf8f4a5d96296170bdcaf36f002ece1359fd3522fcb2c3f905936dfc28abedf8a604445c6287d6dd273a0be661ff3bf9d3cddb499924ae6bfa5603eb7eae47cf536b0a2db690ecb477f566e88c009fd56bfc64cc00465dc00e0d7d3742c4ea5ca599a5d35736a295a5b19e81d66acd0b6031850fc3e542c926a45ebfa65a9ff232ec42859311fd3d7ab6882af3d8f0c58c", 0xad}, {&(0x7f0000000340)="6984255141ee88f1b4dbbe9a6342c69a66494b83773a5914f818f3", 0x1b}, {&(0x7f0000000880)="6c864b7b7089266df9995b3ac406504e1b9c18d40af99281f03f74c5434b372bc1c1ec8e6443d0ebc2c5a8e41ce8cba6632737e28afaaca3a1fbe73ee8a790b4f7b715f23c182c4eac48c933f6519005889092f82ca47760e429cf22488bc92b4ba9dee8c7e4a44f0e58d6ccc21a4c3e81f11867bdece4ba6cf06d1c8e95fb857400"/141, 0x8d}], 0x3}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x3}, 0x4, 0x1, 0x9, 0x2, 0x10000, 0xc, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x9218, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700", 0x2c}], 0x1}, 0x0) r9 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'bridge0\x00', 0x2000}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10, '\x00', r4, r5, 0x1, 0x0, 0x4}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d08000600", 0x16}], 0x1}, 0x0) 25.079984808s ago: executing program 3 (id=6036): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000024000000000000000000000007000000000000000900410000000300"/52], 0x48}, 0x20002800) 24.909705602s ago: executing program 2 (id=6037): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = getpid() perf_event_open(&(0x7f0000000480)={0x4, 0x66, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x810, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0xb}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) close(0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e0000001c0d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c4", 0x45}], 0x1}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r1, 0x0, 0x83, 0x25, &(0x7f0000000240)="35a0af28fbdf23e63167ae332799ae7624ee051ec01ded3e65f4d9a72746079b68f7768d51b0131ad1eb0c58c44a0ee8b57462bc2391ad68a283279daf944f23192bce43dc776f3106c888d80453150db11ad73775330f3324534dacd24daa0914f9183223982ecefcc2acf15f9901a38b3e7377d6dbd99fc3158da12a9e3f29e4bcaf", &(0x7f0000000380)=""/37, 0xffff7fff, 0x0, 0xd3, 0xb7, &(0x7f0000000500)="95341ec5eb489b5bcddcb6eb7e2af1323d9ff3560a5fb6dbe161d0fa153a2d5e3268017b1ef2d23a1430233a3ed06f204cfc30606450f3758173864fd93769519212eed29ff28b651874e8defdc9e36ebf2885e5b92fec51edc5acc57596f7cd367ad74a64c81dc2aaaa4124572fef2601f03dbbef5936cae48dbefdc8c31366befd2f69d089058139106b8608cc7ed073a6d12c3e2d834d9535a438fb6ab45ce2b8476767858f0de04512f517c2aa6bb7cba84c1d1cd9bf893548beab0f8edbcce84b1f229414152aa83b6fc73dc6be2efc6d", &(0x7f0000000940)="c515486ca4b5d2c2fcca06943f1f1399d092c41ee6b3ad13e83aeafa2400fdfa34dc249ceaa08891ca7cc8861379a443b8e79929384c8efffc8f86336d4f5a11a7dde5ae5794156888fcea59138a01c507a9715941000375c445c5e0c942e40f40163bcf132bea36823ae313ba48a84ceea0c9a25edc29a340706d40949f16e566aad813e9f838066c53c67b5fdab434b749d9d5fb4c759e92d6f01cac3ef998f0b77020cf2f2a76f00c144055329497807dd17ff5b573", 0x1, 0x0, 0x7fff}, 0x50) socket$kcm(0xa, 0x1, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r7 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x102341, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x24000800) r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0xff, &(0x7f0000000600)=""/255, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000007c0)=[r8, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x5, 0x3, 0x0, 0x2}, {0x0, 0x5, 0x8, 0xb}, {0xd, 0x1, 0x4, 0x2}, {0x0, 0x2, 0xe, 0x8}, {0x0, 0x2, 0x7, 0x4}], 0x10, 0x1}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9, 0x12, 0x0, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x2000800000, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x2}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) 24.879898973s ago: executing program 3 (id=6038): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1}, 0x4) (async) socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257035bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf528666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebdb638d91dbef661935839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dc7718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xff12}, 0x48) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000095000000000000000b180fb94c7cf1bcf8a1f9986bea687dcb95175449915ecf694f3c55497e293620c3bd802a765a720322ef81d8155b3c8094a493b89dfc2d5fcb2be674f6b9a94ba319e12beeac08570cfddce47e4e7740cb145d04112cd3cd85574f50e5d8d4d1b506a0e6c405fd805f88987dc5e3f6a1fc82a529ff55ff348e945ef3081263211aa6e27e4d94e346564d462a8d476a9156903503f43f6355a9962b281b0f9dc4"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e06800000011000000000000002900000032000000fc000000000000001400000000000000000000000200000004000000000000001c"], 0x68}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="faef9d97ded50fd9db8e1676427b75c8cb18c7ab95902de7faec41afedda1b99391e4ff64ef21cf615d5a4dea9c06b0e3580539b865b45d2ef72ba62792f03da7c569dba051cc0f2db1491183e25bdc0ec85996dc2c1bcfd2081781926071c36d7e8f3a25c9f010181b114e5b856c8a17852c8274a88bded51d20fec2351933a5018c23048317875fac38ec57b1869ba6c0cfdf3e4646081fe1fce45b409f2bf566464ba3ff6ac5add0e57f329d0dcde7486bcb3976bbe0df3c8c80a754152", @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x1}, 0x20000, 0x4, 0xc2ba, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000000000009, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x4, @perf_config_ext={0xff, 0x3862}, 0x100410, 0x200, 0x2, 0x1, 0x81, 0x9, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 24.290808727s ago: executing program 3 (id=6039): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000002000000f9ffffff0000000000000400", @ANYRES32, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400f5ff01000000000000006505000000000000000000"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x20, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x3fff8000}, 0x0, 0x31, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000000), 0xff7b) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000000), 0xff7b) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r5}, 0x8) ioctl$TUNSETIFF(r6, 0x5421, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000008f00000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000008f00000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) openat$cgroup_freezer_state(r6, &(0x7f00000001c0), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xb568, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xb568, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="1c009a2844dd540600001a", 0xb}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000001c", @ANYRES32], 0x50) socket$kcm(0x2, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001600)={&(0x7f0000000040)="af5a38dac655a8e415deee01ee8f326898c51f93800f51305b50c52e4d18f55a5da916834a1780e292e36c5f953b", &(0x7f0000000080)=""/240, &(0x7f0000002480)="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", &(0x7f00000014c0)="c8e34f05f6e3328256ead5ed73ccb1b9362b33c22e19347724fb35bd0b4933cb0d70dc61205ef74e81822ffed918629956f0d26101409e0e1bfd570100fc0b896f8dd0e47788f8e48dbfe2be47a7939703ae0dbae60c099bdc38733b5f99f7b1dc8b230716f0ae183e11857536756815c0e66fd4ef600fe737727f6d62033f854b5736fc061f46dbf3f4fb55828bc927b345ba", 0x8, r1, 0x4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000540), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000540), 0x0}, 0x20) 24.20203329s ago: executing program 1 (id=6040): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e", 0x27}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e", 0x27}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010019"], 0x0, 0x56}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010019"], 0x0, 0x56}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x5, 0x0) (async) r0 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x28, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010006080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010006080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080) 24.19864133s ago: executing program 0 (id=6041): bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdfe) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700), 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r3 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0x2000}}, 0x10, 0x0}, 0x4040000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x97, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfbfffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="3eaa0000000000007110410000000000a6000000000000009653820c2bef7d481fc57db478ff80c63bc5eb41354a756ed09f0cd403197d780100000099e01a8b83436d44cf7202e51611008c8995153a6b82599e379abad7540400"/106], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x30, 0x0, 0x5000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x7}]}) 24.166409921s ago: executing program 2 (id=6042): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff620af0fff8ffffff79a4f0ff000000002d040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5040000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd5070ce5c24099d3f18079ebbea6f1707207acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b28753531d3f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c7636f9d1b88caadef8930fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb8bc70000a4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba596684066f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_clone(0x11100, &(0x7f0000000ec0)="f847b9eb894dbf769820c79c1b5a05181a9854f05efb34def59aefa167b85297076ae8a3b890f2ca8e999b75c3a0d7dbc83e015623b388058119871c13706ea7ae142685b75bd935bee1909743de", 0x4e, &(0x7f0000000e80), &(0x7f0000000140), &(0x7f0000000200)="329f261afd8bd293abc124e43e997ac3a9864e54128642653717231804ef63b69c048f824f827676e0426d8f0400000000000000cb6394f8484a3d018eb5aeab7cd16cee505d33dcbd61dbf1bb9da50c7a15f1b6b713a89877ac50aae97902ab29472c39b15bd824ffdee7bc3c85a2e9b8806d87e6e59f260c36233bc24748f264da20883dd702") bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/17, @ANYRES32], 0x50) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r2, 0x0, 0x20) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x40049409, 0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x100c, 0x7f, 0x0, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a00648c2594f90424f3db", 0x14}], 0x1}, 0x4000800) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)) 24.075697443s ago: executing program 3 (id=6043): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x200, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050001000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_clone(0x21140200, 0x0, 0x0, 0x0, 0x0, 0x0) 23.697936702s ago: executing program 3 (id=6044): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x132, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000000), 0xe) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(r2, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x8054) close(r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5580000000000000, 0xb52}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb9, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff47}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xead3086ce9776e24}, 0x0, 0x4, 0xffffffff, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x14, &(0x7f0000000000)=r7, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0e, 0xffffffffffffffa3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x40) close(0x4) r8 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) 23.646046793s ago: executing program 2 (id=6045): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004340000040"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x2, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc60", 0x14}], 0x1}, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x527, 0x1, 0xa0, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)=0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0) (async) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) 23.645703933s ago: executing program 0 (id=6046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f00000000c0)=[{0xc, 0x0, 0x4, 0x3}, {0x6, 0x67, 0x0, 0x800}]}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0xe7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x4041, 0x0, 0x0, 0x6, 0x0, 0x5318, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b502000000000000060000000000000085000000c40000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 0s ago: executing program 32 (id=6046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f00000000c0)=[{0xc, 0x0, 0x4, 0x3}, {0x6, 0x67, 0x0, 0x800}]}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0xe7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x4041, 0x0, 0x0, 0x6, 0x0, 0x5318, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b502000000000000060000000000000085000000c40000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) kernel console output (not intermixed with test programs): 77683][T16271] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 1154.635926][T21289] netlink: 'syz.1.4556': attribute type 10 has an invalid length. [ 1154.702822][T21289] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4556'. [ 1154.765206][T21289] batadv_slave_1: entered promiscuous mode [ 1154.777781][T21289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1154.793677][T21289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.092573][T21288] delete_channel: no stack [ 1155.503171][T21298] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 1155.990427][T21319] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4563'. [ 1156.017611][T21319] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1156.220389][T21325] netlink: 'syz.1.4564': attribute type 2 has an invalid length. [ 1156.237502][T21325] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.4564'. [ 1158.678779][T21310] delete_channel: no stack [ 1158.852640][T21338] bridge0: port 3(dummy0) entered disabled state [ 1158.859349][T21338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.868230][T21338] bridge0: left promiscuous mode [ 1158.919748][T21339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4567'. [ 1158.936855][T21339] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4567'. [ 1158.947904][T21339] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 1158.972415][T21340] bridge0: port 3(dummy0) entered blocking state [ 1158.978965][T21340] bridge0: port 3(dummy0) entered listening state [ 1158.985778][T21340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.993092][T21340] bridge0: port 2(bridge_slave_1) entered listening state [ 1159.022228][T21340] bridge0: entered promiscuous mode [ 1159.046785][T21343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4567'. [ 1159.067936][T21343] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4567'. [ 1159.092491][T21343] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 1159.341907][T21342] mac80211_hwsim hwsim31 wlan1: left promiscuous mode [ 1159.673181][T21342] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4569'. [ 1159.688369][T21348] netlink: 'syz.3.4569': attribute type 8 has an invalid length. [ 1159.696455][T21348] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4569'. [ 1159.842324][T21351] bridge0: port 3(dummy0) entered disabled state [ 1159.849367][T21351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.940447][T21351] bridge0: left promiscuous mode [ 1160.045434][T21352] bridge0: port 3(dummy0) entered blocking state [ 1160.052163][T21352] bridge0: port 3(dummy0) entered listening state [ 1160.059266][T21352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.066631][T21352] bridge0: port 2(bridge_slave_1) entered listening state [ 1160.207896][T21352] bridge0: entered promiscuous mode [ 1160.334430][T21355] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 1160.556330][T21363] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4573'. [ 1160.590752][T21363] netlink: 6260 bytes leftover after parsing attributes in process `syz.3.4573'. [ 1161.066447][T21388] veth1_macvtap: left promiscuous mode [ 1161.087547][T21388] macsec0: entered allmulticast mode [ 1161.162809][T21393] veth1_macvtap: entered promiscuous mode [ 1161.177700][T21393] veth1_macvtap: entered allmulticast mode [ 1161.187612][T21393] macsec0: entered promiscuous mode [ 1161.552049][T21400] __nla_validate_parse: 1 callbacks suppressed [ 1161.552165][T21400] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.4580'. [ 1161.645557][T21400] netlink: zone id is out of range [ 1161.652562][T21400] netlink: zone id is out of range [ 1161.666129][T21400] netlink: zone id is out of range [ 1161.673810][T21400] netlink: zone id is out of range [ 1161.684645][T21400] netlink: zone id is out of range [ 1161.694770][T21400] netlink: zone id is out of range [ 1161.705017][T21400] netlink: zone id is out of range [ 1161.712300][T21400] netlink: zone id is out of range [ 1161.723385][T21400] netlink: zone id is out of range [ 1161.732030][T21400] netlink: zone id is out of range [ 1161.758146][T21407] bridge0: port 3(dummy0) entered disabled state [ 1161.764866][T21407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.815856][T21407] bridge0: left promiscuous mode [ 1161.861787][T21409] bridge0: port 3(dummy0) entered blocking state [ 1161.868373][T21409] bridge0: port 3(dummy0) entered listening state [ 1161.875211][T21409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.882513][T21409] bridge0: port 2(bridge_slave_1) entered listening state [ 1161.899601][T21409] bridge0: entered promiscuous mode [ 1165.062261][T21423] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4588'. [ 1165.240008][T21431] netlink: 'syz.1.4590': attribute type 39 has an invalid length. [ 1167.048248][T21473] netlink: 'syz.0.4602': attribute type 3 has an invalid length. [ 1167.059782][T21473] netlink: 'syz.0.4602': attribute type 4 has an invalid length. [ 1167.071621][T21473] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.4602'. [ 1167.319131][T21437] delete_channel: no stack [ 1167.499104][T21484] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.4606'. [ 1167.588705][T21488] lo: entered promiscuous mode [ 1167.974687][T21506] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4614'. [ 1168.040741][T21506] netlink: 'syz.1.4614': attribute type 21 has an invalid length. [ 1168.116361][T21506] netlink: 'syz.1.4614': attribute type 4 has an invalid length. [ 1168.140553][T21506] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4614'. [ 1168.751122][T21522] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4618'. [ 1168.765440][T21522] net_ratelimit: 80 callbacks suppressed [ 1168.765458][T21522] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1171.391158][T21527] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4621'. [ 1171.406256][T21534] netlink: 'syz.2.4622': attribute type 21 has an invalid length. [ 1171.762555][T21548] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.4627'. [ 1171.786931][T21548] netlink: zone id is out of range [ 1171.796079][T21548] netlink: zone id is out of range [ 1171.803244][T21548] netlink: zone id is out of range [ 1171.811523][T21548] netlink: zone id is out of range [ 1171.819430][T21548] netlink: zone id is out of range [ 1171.826949][T21548] netlink: zone id is out of range [ 1171.833461][T21548] netlink: zone id is out of range [ 1171.842482][T21548] netlink: zone id is out of range [ 1171.863149][T21548] netlink: zone id is out of range [ 1171.864795][T21547] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4626'. [ 1171.963219][T21547] netlink: 'syz.1.4626': attribute type 8 has an invalid length. [ 1171.984278][T21547] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4626'. [ 1173.594327][T21565] netlink: 'syz.1.4631': attribute type 9 has an invalid length. [ 1173.644240][T21565] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4631'. [ 1174.045891][T21577] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4634'. [ 1175.002113][T21583] delete_channel: no stack [ 1175.140734][T21599] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4640'. [ 1175.304291][T21594] netlink: 'syz.0.4640': attribute type 8 has an invalid length. [ 1175.493336][T21594] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4640'. [ 1176.610043][T21616] netlink: 'syz.2.4644': attribute type 10 has an invalid length. [ 1176.658539][T21616] syz_tun: entered promiscuous mode [ 1177.121803][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1177.135062][ C1] bridge0: port 3(dummy0) entered learning state [ 1177.166471][T21616] netlink: 'syz.2.4644': attribute type 10 has an invalid length. [ 1177.405462][T21624] netlink: 'syz.3.4646': attribute type 12 has an invalid length. [ 1177.443048][T21624] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.4646'. [ 1177.968334][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.974841][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.290617][T21636] netlink: 'syz.2.4656': attribute type 10 has an invalid length. [ 1179.642911][T21637] netlink: 'syz.2.4656': attribute type 10 has an invalid length. [ 1180.277880][T21660] net_ratelimit: 81 callbacks suppressed [ 1180.277899][T21660] netlink: set zone limit has 8 unknown bytes [ 1180.645189][T21672] bridge0: port 3(team0) entered disabled state [ 1180.652032][T21672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.659535][T21672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.675072][T21672] bridge0: left promiscuous mode [ 1180.712083][T21671] netlink: 'syz.0.4659': attribute type 4 has an invalid length. [ 1182.351832][T21681] netlink: 'syz.3.4660': attribute type 10 has an invalid length. [ 1182.374085][T21681] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1182.399105][T21664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1182.416837][T21681] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1182.458345][T21681] team0: Port device netdevsim0 added [ 1182.480609][T21682] netlink: 'syz.3.4660': attribute type 10 has an invalid length. [ 1182.498044][T21682] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1182.528573][T21682] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1182.580600][T21682] team0: Port device netdevsim0 removed [ 1183.922815][T21739] netlink: 'syz.0.4676': attribute type 10 has an invalid length. [ 1184.123997][T21739] team0: Port device netdevsim0 added [ 1184.162063][T21740] netlink: 'syz.0.4676': attribute type 10 has an invalid length. [ 1184.299478][T21740] team0: Port device netdevsim0 removed [ 1184.323470][T21740] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1185.326429][T21776] netlink: 'syz.2.4687': attribute type 1 has an invalid length. [ 1185.345578][T21776] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4687'. [ 1186.724296][T21795] netlink: 'syz.1.4692': attribute type 10 has an invalid length. [ 1186.976855][T21795] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1187.002563][T21795] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1187.065488][T21795] team0: Port device netdevsim0 added [ 1187.092531][T21798] netlink: 'syz.1.4692': attribute type 10 has an invalid length. [ 1187.107995][T21798] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1187.124730][T21798] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1187.203691][T21798] team0: Port device netdevsim0 removed [ 1187.258255][T21813] bridge0: port 3(dummy0) entered disabled state [ 1187.264916][T21816] netlink: 'syz.0.4695': attribute type 3 has an invalid length. [ 1187.265039][T21813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.294813][T21813] bridge0: left promiscuous mode [ 1187.299090][T21816] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4695'. [ 1187.805408][T21828] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4702'. [ 1188.459850][T21849] netlink: 'syz.3.4704': attribute type 4 has an invalid length. [ 1189.240525][T21864] netlink: 'syz.1.4710': attribute type 17 has an invalid length. [ 1189.268212][T21864] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1190.055676][T21877] netlink: 'syz.1.4714': attribute type 10 has an invalid length. [ 1190.277877][T21877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1190.315674][T21877] batadv0: entered promiscuous mode [ 1190.336762][T21877] batadv0: entered allmulticast mode [ 1190.369393][T21877] team0: Port device batadv0 added [ 1190.908932][T21894] netlink: 'syz.1.4717': attribute type 4 has an invalid length. [ 1191.541694][T21903] netlink: 'syz.2.4721': attribute type 39 has an invalid length. [ 1191.974805][T21914] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4724'. [ 1192.678423][T21923] netlink: 13439 bytes leftover after parsing attributes in process `syz.2.4727'. [ 1192.977124][T21927] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4728'. [ 1193.288246][T21933] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4730'. [ 1193.900272][T21949] FAULT_INJECTION: forcing a failure. [ 1193.900272][T21949] name failslab, interval 1, probability 0, space 0, times 0 [ 1193.964311][T21949] CPU: 0 PID: 21949 Comm: syz.1.4736 Not tainted syzkaller #0 [ 1193.971878][T21949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1193.982031][T21949] Call Trace: [ 1193.985365][T21949] [ 1193.988349][T21949] dump_stack_lvl+0x18c/0x250 [ 1193.993123][T21949] ? show_regs_print_info+0x20/0x20 [ 1193.998385][T21949] ? load_image+0x420/0x420 [ 1194.002953][T21949] ? __might_sleep+0xe0/0xe0 [ 1194.007619][T21949] ? __lock_acquire+0x7d80/0x7d80 [ 1194.012760][T21949] should_fail_ex+0x394/0x4c0 [ 1194.017517][T21949] should_failslab+0x9/0x20 [ 1194.022104][T21949] slab_pre_alloc_hook+0x59/0x300 [ 1194.027254][T21949] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1194.033049][T21949] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1194.038849][T21949] __kmem_cache_alloc_node+0x53/0x250 [ 1194.044312][T21949] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1194.050106][T21949] __kmalloc+0xa7/0x240 [ 1194.054351][T21949] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1194.059989][T21949] ? tomoyo_domain+0xd6/0x120 [ 1194.064754][T21949] tomoyo_path_number_perm+0x248/0x5e0 [ 1194.070287][T21949] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1194.075985][T21949] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1194.081500][T21949] ? trace_call_bpf+0xc3/0x6c0 [ 1194.086319][T21949] ? trace_call_bpf+0xc3/0x6c0 [ 1194.091154][T21949] ? trace_call_bpf+0x5e9/0x6c0 [ 1194.096097][T21949] ? __fget_files+0x28/0x460 [ 1194.100767][T21949] security_file_ioctl+0x70/0xa0 [ 1194.105781][T21949] __se_sys_ioctl+0x48/0x170 [ 1194.110456][T21949] do_syscall_64+0x55/0xb0 [ 1194.115112][T21949] ? clear_bhb_loop+0x40/0x90 [ 1194.119855][T21949] ? clear_bhb_loop+0x40/0x90 [ 1194.124609][T21949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1194.130590][T21949] RIP: 0033:0x7f9da099e0d9 [ 1194.135110][T21949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.154792][T21949] RSP: 002b:00007f9da1844028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1194.163281][T21949] RAX: ffffffffffffffda RBX: 00007f9da0c26090 RCX: 00007f9da099e0d9 [ 1194.171315][T21949] RDX: 0000200000000900 RSI: 0000000000008914 RDI: 0000000000000006 [ 1194.179432][T21949] RBP: 00007f9da1844090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.187500][T21949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.195531][T21949] R13: 00007f9da0c26128 R14: 00007f9da0c26090 R15: 00007fff0498e848 [ 1194.203591][T21949] [ 1194.237643][T21949] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1194.416581][T21943] sit0: left promiscuous mode [ 1195.454308][T21962] netlink: 668 bytes leftover after parsing attributes in process `syz.1.4737'. [ 1195.497441][T21962] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1195.549201][T21962] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1195.741717][T21967] bridge0: port 3(team0) entered blocking state [ 1195.748269][T21967] bridge0: port 3(team0) entered listening state [ 1195.755031][T21967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.762322][T21967] bridge0: port 2(bridge_slave_1) entered listening state [ 1195.769848][T21967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.777240][T21967] bridge0: port 1(bridge_slave_0) entered listening state [ 1195.988180][T21967] bridge0: entered promiscuous mode [ 1196.244208][T21984] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4741'. [ 1197.191333][T22007] bridge0: port 3(dummy0) entered blocking state [ 1197.197991][T22007] bridge0: port 3(dummy0) entered listening state [ 1197.205087][T22007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.212711][T22007] bridge0: port 2(bridge_slave_1) entered listening state [ 1197.238492][T22007] bridge0: entered promiscuous mode [ 1197.256788][T21991] netlink: 'syz.1.4744': attribute type 13 has an invalid length. [ 1197.293860][T21991] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4744'. [ 1197.567255][T21991] erspan0: refused to change device tx_queue_len [ 1197.621814][T22015] netlink: 'syz.2.4750': attribute type 3 has an invalid length. [ 1197.637524][T22015] netlink: 193180 bytes leftover after parsing attributes in process `syz.2.4750'. [ 1197.653436][T22011] sit0: entered promiscuous mode [ 1198.365050][T22022] syzkaller0: entered promiscuous mode [ 1198.515856][T22033] bridge0: port 3(team0) entered disabled state [ 1198.522468][T22033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.529786][T22033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.567778][T22033] bridge0: left promiscuous mode [ 1199.029297][T22039] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1199.060314][T22039] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1199.069261][T22039] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1199.089329][T22039] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1199.097159][T22039] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1199.106918][T22039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1201.159920][T22034] bridge0: port 3(team0) entered blocking state [ 1201.166440][T22034] bridge0: port 3(team0) entered listening state [ 1201.173213][T22034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.180456][T22034] bridge0: port 2(bridge_slave_1) entered listening state [ 1201.187904][T22034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.195141][T22034] bridge0: port 1(bridge_slave_0) entered listening state [ 1201.203482][ T5086] Bluetooth: hci2: command tx timeout [ 1201.209913][T22034] bridge0: entered promiscuous mode [ 1201.228079][T22042] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4757'. [ 1201.524830][T22050] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4758'. [ 1201.680327][T20902] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.959377][T20902] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.015039][T22061] netlink: 'syz.3.4762': attribute type 5 has an invalid length. [ 1202.023416][T22061] netlink: 'syz.3.4762': attribute type 1 has an invalid length. [ 1202.038313][T22061] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.4762'. [ 1202.054073][T22056] netlink: 'syz.0.4760': attribute type 13 has an invalid length. [ 1202.084639][T22056] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4760'. [ 1202.269752][T22056] erspan0: refused to change device tx_queue_len [ 1202.407037][T22066] netlink: 'syz.3.4762': attribute type 39 has an invalid length. [ 1202.549678][T22066] hsr_slave_1 (unregistering): left promiscuous mode [ 1202.626203][T20902] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.689708][T22037] chnl_net:caif_netlink_parms(): no params data found [ 1202.833840][T20902] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.267726][ T5086] Bluetooth: hci2: command tx timeout [ 1203.579175][T22037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.616792][T22037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.638576][T22037] bridge_slave_0: entered allmulticast mode [ 1203.646231][T22037] bridge_slave_0: entered promiscuous mode [ 1203.656044][T22037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.663529][T22037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.670950][T22037] bridge_slave_1: entered allmulticast mode [ 1203.679756][T22037] bridge_slave_1: entered promiscuous mode [ 1203.822337][T22091] žÿ: renamed from team_slave_1 (while UP) [ 1203.906248][T22037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.957116][T22037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.212113][T22037] team0: Port device team_slave_0 added [ 1204.272844][T22037] team0: Port device team_slave_1 added [ 1204.417255][T22037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.497473][T22037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1204.560301][T22037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1204.574411][T22037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1204.618796][T22037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1204.717427][T22037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.044141][T22101] netlink: 'syz.3.4770': attribute type 13 has an invalid length. [ 1205.059145][T22101] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4770'. [ 1205.188299][T22101] erspan0: refused to change device tx_queue_len [ 1205.344771][T22037] hsr_slave_0: entered promiscuous mode [ 1205.351464][ T5086] Bluetooth: hci2: command tx timeout [ 1205.408262][T22037] hsr_slave_1: entered promiscuous mode [ 1205.414866][T22037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1205.434694][T22037] Cannot create hsr debugfs directory [ 1205.917251][T22126] bridge0: port 3(team0) entered disabled state [ 1205.923969][T22126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.931393][T22126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.968118][T22126] bridge0: left promiscuous mode [ 1206.033979][T22131] bridge0: port 3(team0) entered blocking state [ 1206.040562][T22131] bridge0: port 3(team0) entered listening state [ 1206.047294][T22131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.054680][T22131] bridge0: port 2(bridge_slave_1) entered listening state [ 1206.062264][T22131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.069616][T22131] bridge0: port 1(bridge_slave_0) entered listening state [ 1206.086845][T22131] bridge0: entered promiscuous mode [ 1206.133046][T22124] netlink: 'syz.1.4774': attribute type 3 has an invalid length. [ 1206.227835][T22124] netlink: 'syz.1.4774': attribute type 1 has an invalid length. [ 1206.261682][T22124] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.4774'. [ 1207.427556][ T5086] Bluetooth: hci2: command tx timeout [ 1208.349502][T22141] netlink: 'syz.3.4776': attribute type 6 has an invalid length. [ 1208.362801][T22141] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4776'. [ 1209.468934][T22148] žÿ: renamed from team_slave_1 (while UP) [ 1209.478162][T22153] netlink: 'syz.3.4779': attribute type 10 has an invalid length. [ 1209.530302][T22153] bridge0: port 3(team0) entered disabled state [ 1209.660227][T22153] bridge0: port 3(team0) entered disabled state [ 1209.678701][T22153] team_slave_0: left promiscuous mode [ 1209.684395][T22153] team_slave_0: left allmulticast mode [ 1209.712570][T22153] team0 (unregistering): Port device team_slave_0 removed [ 1209.734709][T22153] team_slave_1: left promiscuous mode [ 1209.741229][T22153] team_slave_1: left allmulticast mode [ 1209.786141][T22153] team0 (unregistering): Port device team_slave_1 removed [ 1209.812849][T22153] geneve1: left promiscuous mode [ 1209.819069][T22153] geneve1: left allmulticast mode [ 1209.869781][T22153] team0 (unregistering): Port device geneve1 removed [ 1210.321756][T22169] netlink: 1030 bytes leftover after parsing attributes in process `syz.0.4781'. [ 1210.461553][T22175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.468980][T22175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.494595][T22175] bridge0: left promiscuous mode [ 1210.521602][T22180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.528898][T22180] bridge0: port 2(bridge_slave_1) entered listening state [ 1210.536505][T22180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.543807][T22180] bridge0: port 1(bridge_slave_0) entered listening state [ 1210.578377][T22180] bridge0: entered promiscuous mode [ 1210.760245][T22181] netlink: 'syz.0.4784': attribute type 3 has an invalid length. [ 1210.768763][T22181] netlink: 'syz.0.4784': attribute type 1 has an invalid length. [ 1210.790448][T22181] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.4784'. [ 1212.307488][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1212.314916][ C0] bridge0: port 3(dummy0) entered learning state [ 1213.524565][T22037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1213.785101][T22037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1213.845600][T22037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1213.865608][T22207] netlink: 'syz.0.4788': attribute type 10 has an invalid length. [ 1213.983326][T22207] team0: Device wg1 is of different type [ 1214.066599][T22208] žÿ: renamed from team_slave_1 [ 1214.325323][T22037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1215.570146][T22240] netlink: 'syz.3.4795': attribute type 3 has an invalid length. [ 1215.591989][T22240] netlink: 'syz.3.4795': attribute type 1 has an invalid length. [ 1215.625278][T22240] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.4795'. [ 1215.651022][T22037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.983713][T20902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1216.017708][T20902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1216.048461][T20902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1216.076986][T20902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1216.134326][T20902] bridge0: port 3(dummy0) entered disabled state [ 1216.174421][T20902] bridge_slave_1: left allmulticast mode [ 1216.201248][T20902] bridge_slave_1: left promiscuous mode [ 1216.207158][T20902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.348482][T20902] veth1_macvtap: left allmulticast mode [ 1216.354554][T20902] veth1_macvtap: left promiscuous mode [ 1216.384956][T20902] veth0_macvtap: left promiscuous mode [ 1217.809014][T20902] team0 (unregistering): Port device team_slave_1 removed [ 1218.898018][T22269] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4801'. [ 1218.977094][T22037] 8021q: adding VLAN 0 to HW filter on device team0 [ 1219.029443][T20908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.036667][T20908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.078304][T20908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.085588][T20908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.212168][T22293] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4805'. [ 1219.216872][T22290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.228642][T22290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.269357][T22290] bridge0: left promiscuous mode [ 1219.315258][T22293] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4805'. [ 1219.366679][T22037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1219.385860][T22297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.393185][T22297] bridge0: port 2(bridge_slave_1) entered listening state [ 1219.400823][T22297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.408205][T22297] bridge0: port 1(bridge_slave_0) entered listening state [ 1219.426877][T22297] bridge0: entered promiscuous mode [ 1220.108930][T22037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1220.308021][T22319] delete_channel: no stack [ 1220.313055][T22319] delete_channel: no stack [ 1220.334164][T22037] veth0_vlan: entered promiscuous mode [ 1220.381873][T22037] veth1_vlan: entered promiscuous mode [ 1220.469400][T22037] veth0_macvtap: entered promiscuous mode [ 1220.493970][T22037] veth1_macvtap: entered promiscuous mode [ 1220.589348][T22037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.645284][T22037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.681081][T22037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.721104][T22037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.749997][T22037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.791181][T22037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.841186][T22037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1220.893215][T22037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1220.964233][T22037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.011318][T22037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1221.081678][T22037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.140329][T22037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.179232][T22037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.253243][T22037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.216796][T22358] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 1223.239384][T22358] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 1223.416103][T20901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.451036][T20901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.540163][T20901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.563451][T20901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.737980][T22365] bond0: entered promiscuous mode [ 1223.773764][T22365] bond_slave_1: entered promiscuous mode [ 1223.797730][T22365] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode [ 1223.836872][T22365] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1223.860473][T22365] bond0: entered allmulticast mode [ 1223.889452][T22365] bond_slave_1: entered allmulticast mode [ 1223.915736][T22365] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1223.956244][T22365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.469288][T22374] netlink: 'syz.1.4816': attribute type 10 has an invalid length. [ 1224.509338][T22374] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4816'. [ 1224.818073][T22380] netlink: 'syz.0.4819': attribute type 13 has an invalid length. [ 1225.196102][T22388] netlink: 'syz.0.4822': attribute type 29 has an invalid length. [ 1225.375017][T22039] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1225.385999][T22039] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1225.394621][T22039] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1225.403084][T22039] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1225.411383][T22039] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1225.418935][T22039] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1225.470475][T22388] netlink: 'syz.0.4822': attribute type 29 has an invalid length. [ 1225.648020][T13759] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.899627][T13759] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.141447][T13759] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.575386][T13759] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.683544][T22394] chnl_net:caif_netlink_parms(): no params data found [ 1226.934966][T22394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.971331][T22394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.995398][T22394] bridge_slave_0: entered allmulticast mode [ 1227.020384][T22394] bridge_slave_0: entered promiscuous mode [ 1227.086113][T22394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.117152][T22394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.125425][T22394] bridge_slave_1: entered allmulticast mode [ 1227.144280][T22394] bridge_slave_1: entered promiscuous mode [ 1227.244534][T22394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.300589][T22394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.398339][T22394] team0: Port device team_slave_0 added [ 1227.514372][ T5086] Bluetooth: hci3: command tx timeout [ 1227.831022][T22394] team0: Port device team_slave_1 added [ 1228.165788][T22394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.188088][T22394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1228.235120][T22394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.280003][T22470] netlink: 'syz.1.4838': attribute type 10 has an invalid length. [ 1228.297855][T22470] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1228.359554][T22466] netlink: 'syz.0.4839': attribute type 10 has an invalid length. [ 1228.367886][T22466] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4839'. [ 1228.378455][T22394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.385473][T22394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1228.447398][T22394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.946687][T22394] hsr_slave_0: entered promiscuous mode [ 1228.978139][T22394] hsr_slave_1: entered promiscuous mode [ 1229.001030][T22394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1229.024322][T22394] Cannot create hsr debugfs directory [ 1229.587564][ T5086] Bluetooth: hci3: command tx timeout [ 1229.621973][T22509] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4846'. [ 1231.672910][ T5086] Bluetooth: hci3: command tx timeout [ 1233.384353][T22527] IPv6: NLM_F_CREATE should be specified when creating new route [ 1233.392533][T22530] netlink: 'syz.0.4850': attribute type 2 has an invalid length. [ 1233.450884][T22545] netlink: 'syz.0.4850': attribute type 3 has an invalid length. [ 1233.463971][T22545] netlink: 10210 bytes leftover after parsing attributes in process `syz.0.4850'. [ 1233.760737][ T5086] Bluetooth: hci3: command tx timeout [ 1234.010709][T22574] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4856'. [ 1234.452691][T22558] delete_channel: no stack [ 1234.582277][T13759] hsr_slave_0: left promiscuous mode [ 1234.609183][T13759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.627125][T13759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.661610][T13759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.677737][T13759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.694780][T13759] bridge_slave_1: left allmulticast mode [ 1234.704650][T13759] bridge_slave_1: left promiscuous mode [ 1234.710668][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1234.710991][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1234.731471][T13759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.732135][T22591] sctp: [Deprecated]: syz.2.4858 (pid 22591) Use of int in max_burst socket option deprecated. [ 1234.732135][T22591] Use struct sctp_assoc_value instead [ 1234.760371][T13759] bridge_slave_0: left allmulticast mode [ 1234.766616][T13759] bridge_slave_0: left promiscuous mode [ 1234.775234][T13759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.804872][T13759] veth1_macvtap: left allmulticast mode [ 1234.811029][T13759] veth1_macvtap: left promiscuous mode [ 1234.828152][T13759] veth0_macvtap: left promiscuous mode [ 1234.847663][T13759] veth1_vlan: left promiscuous mode [ 1234.853475][T13759] veth0_vlan: left promiscuous mode [ 1235.000150][T22591] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4858'. [ 1236.565147][T22591] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1236.598784][T22598] syzkaller0: entered promiscuous mode [ 1236.630033][T22598] syzkaller0: entered allmulticast mode [ 1237.087263][T22394] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1237.125604][T22394] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1237.153828][T22394] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1237.193218][T22394] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1237.499472][T22394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.554277][T22394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.611065][T13766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.618349][T13766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.703942][T20906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.711242][T20906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.265928][T22639] netlink: 197856 bytes leftover after parsing attributes in process `syz.0.4866'. [ 1238.545037][T22650] netlink: 'syz.0.4867': attribute type 19 has an invalid length. [ 1238.577826][T22650] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4867'. [ 1238.658473][T22650] netlink: 'syz.0.4867': attribute type 21 has an invalid length. [ 1238.776024][T22659] netlink: 'syz.2.4870': attribute type 29 has an invalid length. [ 1238.786572][T22659] netlink: 'syz.2.4870': attribute type 29 has an invalid length. [ 1238.820757][T22659] netlink: 'syz.2.4870': attribute type 29 has an invalid length. [ 1238.912628][T22394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.025852][T22657] netlink: 'syz.1.4869': attribute type 10 has an invalid length. [ 1239.078034][T22657] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4869'. [ 1239.172680][T22394] veth0_vlan: entered promiscuous mode [ 1239.212118][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.219507][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.313572][T22394] veth1_vlan: entered promiscuous mode [ 1239.479945][T22394] veth0_macvtap: entered promiscuous mode [ 1239.521085][T22394] veth1_macvtap: entered promiscuous mode [ 1239.606179][T22394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1239.637871][T22394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.674638][T22394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1239.703107][T22394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.716406][T22394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1239.732725][T22394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.796384][T22394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1239.840157][T22394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.867377][T22394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.919105][T22394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1239.950885][T22394] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.977473][T22394] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.002703][T22394] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.027438][T22394] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.256651][T20902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.284746][T20902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.354007][T20906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.381838][T20906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.640368][T22698] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4878'. [ 1240.759750][T22707] netlink: 'syz.3.4817': attribute type 10 has an invalid length. [ 1240.809014][T22707] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.4817'. [ 1241.568784][T22734] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4885'. [ 1241.825719][T22740] bond0: entered promiscuous mode [ 1241.854667][T22740] bond_slave_0: entered promiscuous mode [ 1241.906941][T22740] bond_slave_1: entered promiscuous mode [ 1241.987809][T22740] bond0: entered allmulticast mode [ 1241.993033][T22740] bond_slave_0: entered allmulticast mode [ 1242.073409][T22740] bond_slave_1: entered allmulticast mode [ 1242.520725][T22039] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1242.532007][T22039] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1242.542084][T22039] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1242.552101][T22039] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1242.561337][T22039] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1242.571313][T22039] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1242.755236][T22754] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4889'. [ 1242.912569][T22754] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4889'. [ 1242.972222][T22763] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4889'. [ 1243.331490][T13766] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.719914][T13766] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.972192][T13766] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.021024][T22791] netlink: 'syz.3.4896': attribute type 2 has an invalid length. [ 1244.062694][T22791] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4896'. [ 1244.238427][T13766] bond0: (slave netdevsim0): Releasing backup interface [ 1244.302936][T13766] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 1244.347621][T13766] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1244.379862][T13766] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.492194][T22804] sctp: [Deprecated]: syz.3.4899 (pid 22804) Use of int in maxseg socket option. [ 1244.492194][T22804] Use struct sctp_assoc_value instead [ 1244.514176][T22806] netlink: 'syz.2.4898': attribute type 19 has an invalid length. [ 1244.566287][T22806] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4898'. [ 1244.628878][ T5086] Bluetooth: hci4: command tx timeout [ 1244.667748][T22806] netlink: 'syz.2.4898': attribute type 21 has an invalid length. [ 1245.065724][T22750] chnl_net:caif_netlink_parms(): no params data found [ 1245.601017][T22831] netlink: 'syz.3.4903': attribute type 2 has an invalid length. [ 1245.609917][T22831] netlink: 'syz.3.4903': attribute type 7 has an invalid length. [ 1245.662688][T22832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.670557][T22832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.707869][T22832] bridge0: entered allmulticast mode [ 1245.731377][T22834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.738901][T22834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.746437][T22834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.753749][T22834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.775842][T22834] bridge0: entered promiscuous mode [ 1246.097164][T22840] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4904'. [ 1246.150538][T22843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4904'. [ 1246.185216][T22851] netlink: 'syz.3.4905': attribute type 10 has an invalid length. [ 1246.485594][T22750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.496989][T22750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.514507][T22750] bridge_slave_0: entered allmulticast mode [ 1246.530243][T22750] bridge_slave_0: entered promiscuous mode [ 1246.563518][T22864] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4908'. [ 1246.681693][T22866] netlink: 'syz.2.4909': attribute type 10 has an invalid length. [ 1246.707909][ T5086] Bluetooth: hci4: command tx timeout [ 1246.758587][T22866] veth0_vlan: entered allmulticast mode [ 1246.771196][T22872] netlink: 'syz.3.4910': attribute type 1 has an invalid length. [ 1246.808919][T22872] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4910'. [ 1247.378626][T22866] veth0_vlan: left promiscuous mode [ 1247.419667][T22866] veth0_vlan: entered promiscuous mode [ 1247.469023][T22866] team0: Device veth0_vlan failed to register rx_handler [ 1247.671670][T22750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.687547][T22750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.694897][T22750] bridge_slave_1: entered allmulticast mode [ 1247.709492][T22750] bridge_slave_1: entered promiscuous mode [ 1247.741585][T22868] netlink: 'syz.2.4909': attribute type 21 has an invalid length. [ 1247.765857][T22868] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4909'. [ 1248.041759][T22750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1248.183509][T22750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.209093][T22893] wg0: entered promiscuous mode [ 1248.214068][T22893] wg0: entered allmulticast mode [ 1248.220882][T22896] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.4914'. [ 1248.504852][T22750] team0: Port device team_slave_0 added [ 1248.542724][T22904] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4916'. [ 1248.788171][ T5086] Bluetooth: hci4: command tx timeout [ 1248.851726][T22750] team0: Port device team_slave_1 added [ 1248.984680][T22899] delete_channel: no stack [ 1249.306165][T22750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.323858][T22750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.406657][T22750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.559902][T22750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.574497][T22750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.654470][T22750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.757730][T22922] netlink: 'syz.3.4920': attribute type 21 has an invalid length. [ 1249.765669][T22922] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4920'. [ 1249.857922][T22922] netlink: 'syz.3.4920': attribute type 4 has an invalid length. [ 1249.865775][T22922] netlink: 'syz.3.4920': attribute type 3 has an invalid length. [ 1249.917389][T22922] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4920'. [ 1250.253752][T13766] bond0: (slave wlan1): Releasing backup interface [ 1250.282917][T13766] mac80211_hwsim hwsim29 wlan1 (unregistering): left promiscuous mode [ 1250.299099][T22937] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.4922'. [ 1250.491392][T22750] hsr_slave_0: entered promiscuous mode [ 1250.523484][T22750] hsr_slave_1: entered promiscuous mode [ 1250.550020][T22750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1250.570185][T22750] Cannot create hsr debugfs directory [ 1250.877472][ T5086] Bluetooth: hci4: command tx timeout [ 1250.893784][T22953] veth0: entered allmulticast mode [ 1251.171302][T13766] ÿÿÿÿ: port 1(macsec0) entered disabled state [ 1251.256169][T13766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1251.287978][T13766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.307472][T13766] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1251.315068][T13766] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1251.364980][T22973] netlink: 'syz.3.4927': attribute type 29 has an invalid length. [ 1251.385996][T22975] netlink: 'syz.3.4927': attribute type 29 has an invalid length. [ 1251.487801][T13766] veth1_macvtap: left allmulticast mode [ 1251.493768][T13766] veth1_macvtap: left promiscuous mode [ 1251.508720][T13766] veth0_macvtap: left promiscuous mode [ 1252.542960][T13766] team0 (unregistering): Port device hsr_slave_0 removed [ 1252.792884][T13766] team0 (unregistering): Port device 76žÿ removed [ 1252.924801][T13766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.942512][T13766] bond_slave_1 (unregistering): left promiscuous mode [ 1252.964422][T13766] bond_slave_1 (unregistering): left allmulticast mode [ 1253.341654][T13766] team0 (unregistering): Port device batadv0 removed [ 1253.483467][T13766] team0 (unregistering): Port device bond0 removed [ 1253.542164][T13766] bond0 (unregistering): Released all slaves [ 1253.635840][T22964] netlink: 'syz.2.4926': attribute type 2 has an invalid length. [ 1253.646940][T22964] netlink: 'syz.2.4926': attribute type 8 has an invalid length. [ 1253.665097][T22964] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4926'. [ 1253.685540][T22970] netlink: 'syz.2.4926': attribute type 2 has an invalid length. [ 1253.695805][T22970] netlink: 'syz.2.4926': attribute type 8 has an invalid length. [ 1253.712885][T22970] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4926'. [ 1253.731321][T22975] netlink: 'syz.3.4927': attribute type 29 has an invalid length. [ 1253.754528][T22980] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4927'. [ 1253.840451][T23010] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4929'. [ 1254.279180][T23024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.334283][T23024] bridge_slave_1: left allmulticast mode [ 1254.348771][T23024] bridge_slave_1: left promiscuous mode [ 1254.364981][T23024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.390607][T23024] bridge_slave_1: entered promiscuous mode [ 1254.411492][T23024] bridge_slave_1: entered allmulticast mode [ 1254.437523][T23024] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1255.013478][T23047] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4934'. [ 1255.400128][T23057] validate_nla: 4 callbacks suppressed [ 1255.400213][T23057] netlink: 'syz.3.4937': attribute type 10 has an invalid length. [ 1255.579069][T23057] team0: Port device dummy0 added [ 1256.451930][T22750] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1256.501223][T22750] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1256.535892][T22750] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1256.573490][T23089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.578008][T23091] netlink: 'syz.3.4944': attribute type 9 has an invalid length. [ 1256.596270][T23091] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4944'. [ 1256.609325][T23089] bridge0: entered allmulticast mode [ 1256.647447][T22750] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1256.738342][T23092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.745628][T23092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1256.777720][T23092] bridge0: entered promiscuous mode [ 1257.039213][T22750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1257.169663][T22750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1257.220709][T20905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.228027][T20905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1257.362358][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.369709][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1257.609205][T22750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1258.325498][T22750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1258.435961][T22750] veth0_vlan: entered promiscuous mode [ 1258.506220][T22750] veth1_vlan: entered promiscuous mode [ 1258.596582][T22750] veth0_macvtap: entered promiscuous mode [ 1258.642552][T22750] veth1_macvtap: entered promiscuous mode [ 1258.676082][T22750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.686864][T22750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.698429][T22750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.711522][T22750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.768592][T22750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.804820][T22750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.847894][T22750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1258.890705][T22750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1258.927645][T22750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.980722][T22750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.012913][T22750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.055476][T22750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1259.094308][T23157] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4955'. [ 1259.155348][T22750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.181780][T22750] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.211511][T22750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.257460][T22750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.396329][T23164] netlink: 'syz.2.4958': attribute type 9 has an invalid length. [ 1259.412536][T23164] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.4958'. [ 1259.500145][T23166] netlink: 'syz.3.4960': attribute type 29 has an invalid length. [ 1259.560984][T23169] netlink: 'syz.3.4960': attribute type 29 has an invalid length. [ 1259.584706][T23166] netlink: 'syz.3.4960': attribute type 29 has an invalid length. [ 1259.667922][T20905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1259.675861][T20905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1259.813604][T13759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1259.830937][T13759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.576504][T23204] netlink: 57923 bytes leftover after parsing attributes in process `syz.2.4967'. [ 1261.279359][T23217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1261.313059][T23227] netlink: 'syz.0.4973': attribute type 1 has an invalid length. [ 1261.346346][T23227] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4973'. [ 1261.653585][T13759] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.681576][T22039] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1261.715736][T22039] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1261.738726][T22039] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1261.750017][T22039] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1261.760244][T22039] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1261.770188][T22039] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1261.774505][T23224] netlink: 'syz.2.4972': attribute type 10 has an invalid length. [ 1261.903456][T23224] team0: Device ipvlan1 failed to register rx_handler [ 1262.055784][T13759] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.112335][T23243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.119883][T23243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.137718][T23243] bridge0: left promiscuous mode [ 1262.197988][T23245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.205264][T23245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.212903][T23245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.220173][T23245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.270200][T23245] bridge0: entered promiscuous mode [ 1262.349876][T13759] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.512249][T13759] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.015627][T23279] netlink: 'syz.3.4981': attribute type 10 has an invalid length. [ 1263.070462][T23279] team0: Device wg1 is of different type [ 1263.099479][T23277] netlink: 'syz.0.4983': attribute type 19 has an invalid length. [ 1263.134838][T13759] tipc: Left network mode [ 1263.449697][T23298] netlink: 'syz.3.4984': attribute type 6 has an invalid length. [ 1263.482534][T23298] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4984'. [ 1263.825963][T23233] chnl_net:caif_netlink_parms(): no params data found [ 1263.837741][T22039] Bluetooth: hci0: command tx timeout [ 1263.868659][T23306] netlink: 'syz.0.4985': attribute type 21 has an invalid length. [ 1263.876866][T23306] netlink: 'syz.0.4985': attribute type 1 has an invalid length. [ 1264.261744][T23319] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.276862][T23319] bridge0: left promiscuous mode [ 1264.299211][T23321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.306527][T23321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.330566][T23321] bridge0: entered promiscuous mode [ 1264.820549][T23345] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.4993'. [ 1264.835381][T23345] openvswitch: netlink: IP tunnel dst address not specified [ 1264.843134][T23233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.843256][T23233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.843489][T23233] bridge_slave_0: entered allmulticast mode [ 1264.888749][T23233] bridge_slave_0: entered promiscuous mode [ 1264.905262][T23233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.929124][T23233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.946780][T23233] bridge_slave_1: entered allmulticast mode [ 1264.968953][T23233] bridge_slave_1: entered promiscuous mode [ 1265.795025][T23354] netlink: 'syz.2.4995': attribute type 29 has an invalid length. [ 1265.843702][T23233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1265.870513][T23233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1265.920743][T22039] Bluetooth: hci0: command tx timeout [ 1266.017107][T23233] team0: Port device team_slave_0 added [ 1266.104449][T23233] team0: Port device team_slave_1 added [ 1266.591129][T23376] netlink: 'syz.3.4998': attribute type 5 has an invalid length. [ 1266.627022][T23233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1266.647899][T23233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1266.737419][T23233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1266.818369][T23233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.846250][T23233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1266.943454][T23233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1267.217651][T23389] netlink: 'syz.3.5001': attribute type 9 has an invalid length. [ 1267.227478][T23389] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5001'. [ 1267.416382][T23233] hsr_slave_0: entered promiscuous mode [ 1267.436313][T23233] hsr_slave_1: entered promiscuous mode [ 1267.455380][T23233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1267.477476][T23233] Cannot create hsr debugfs directory [ 1267.977473][T23413] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5006'. [ 1267.989530][T22039] Bluetooth: hci0: command tx timeout [ 1268.042222][T13759] hsr0: left allmulticast mode [ 1268.047078][T13759] hsr_slave_0: left allmulticast mode [ 1268.076775][T13759] hsr_slave_1: left allmulticast mode [ 1268.084353][T13759] nr0: port 1(hsr0) entered disabled state [ 1268.202177][T13759] hsr_slave_0: left promiscuous mode [ 1268.227020][T13759] hsr_slave_1: left promiscuous mode [ 1268.242125][T13759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.259829][T13759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.286785][T13759] veth1_macvtap: left promiscuous mode [ 1268.295278][T13759] veth0_macvtap: left promiscuous mode [ 1268.562293][T13759] geneve1 (unregistering): left promiscuous mode [ 1268.569397][T13759] geneve1 (unregistering): left allmulticast mode [ 1268.593267][T13759] team0 (unregistering): Port device geneve1 removed [ 1269.080073][T13759] žÿ (unregistering): left promiscuous mode [ 1269.087738][T13759] žÿ (unregistering): left allmulticast mode [ 1269.095371][T13759] team0 (unregistering): Port device 76žÿ removed [ 1269.606238][T13759] batadv0 (unregistering): left promiscuous mode [ 1269.612926][T13759] batadv0 (unregistering): left allmulticast mode [ 1269.621413][T13759] team0 (unregistering): Port device batadv0 removed [ 1269.798604][T23419] netlink: 'syz.3.5008': attribute type 39 has an invalid length. [ 1269.879027][T23416] netlink: 'syz.0.5007': attribute type 22 has an invalid length. [ 1269.886935][T23416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5007'. [ 1269.933210][T23421] netlink: 'syz.2.5009': attribute type 6 has an invalid length. [ 1269.941365][T23421] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5009'. [ 1270.067424][T22039] Bluetooth: hci0: command tx timeout [ 1271.175341][T23453] sit0: entered allmulticast mode [ 1271.309467][T23453] sit0: entered promiscuous mode [ 1271.871756][T23233] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1271.894536][T23233] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1271.965603][T23233] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1272.051804][T23473] netlink: 'syz.2.5020': attribute type 21 has an invalid length. [ 1272.073837][T23233] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1272.486949][T23233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.588750][T23484] netlink: 'syz.2.5022': attribute type 6 has an invalid length. [ 1272.605909][T23484] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5022'. [ 1273.301921][T23233] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.356333][T20902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.363629][T20902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.426921][T20905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.434221][T20905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.561979][T23502] tc_dump_action: action bad kind [ 1274.341925][T23233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1274.610710][T23233] veth0_vlan: entered promiscuous mode [ 1274.672532][T23233] veth1_vlan: entered promiscuous mode [ 1274.767978][T23542] netlink: 'syz.0.5033': attribute type 10 has an invalid length. [ 1274.821504][T23542] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.860117][T23542] bond0: (slave team0): Enslaving as an active interface with an up link [ 1274.907877][T23538] netlink: 'syz.2.5034': attribute type 10 has an invalid length. [ 1275.001494][T23538] team0: Port device geneve1 added [ 1275.064461][T23233] veth0_macvtap: entered promiscuous mode [ 1275.192125][T23233] veth1_macvtap: entered promiscuous mode [ 1275.247783][T23233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1275.267037][T23233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.316983][T23233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1275.339535][T23233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.349935][T23233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1275.361134][T23233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.374187][T23233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1275.429638][T23233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.447423][T23233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.472439][T23233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.507603][T23233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.550804][T23233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.583304][T23233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.629346][T23233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1275.703861][T23233] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.741157][T23233] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.769933][T23233] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.792313][T23233] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.616094][T23590] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.5040'. [ 1277.648828][T20908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.662998][T23590] netlink: 'syz.3.5040': attribute type 4 has an invalid length. [ 1277.676320][T20908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.881361][T23597] sock: sock_timestamping_bind_phc: sock not bind to device [ 1277.909353][T20906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.937415][T20906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.086590][T23601] bond0: entered promiscuous mode [ 1278.097586][T23601] bond_slave_0: entered promiscuous mode [ 1278.112400][T23601] bond_slave_1: entered promiscuous mode [ 1278.123822][T23601] bond0: entered allmulticast mode [ 1278.137944][T23601] bond_slave_0: entered allmulticast mode [ 1278.154103][T23601] bond_slave_1: entered allmulticast mode [ 1278.805283][T23611] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4965'. [ 1278.829840][T23612] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5046'. [ 1280.374549][T23632] netlink: 'syz.1.5051': attribute type 10 has an invalid length. [ 1280.450139][T23632] team0: Port device geneve1 added [ 1280.926800][T23648] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5056'. [ 1281.026567][T23648] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5056'. [ 1281.067506][T23648] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5056'. [ 1281.155021][T23648] bond0: (slave bond_slave_0): Releasing backup interface [ 1282.085806][T23648] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1282.753019][T23684] netlink: 'syz.3.5064': attribute type 10 has an invalid length. [ 1282.789767][T23684] team0: Port device geneve1 added [ 1283.037810][T23696] netlink: 'syz.0.5063': attribute type 22 has an invalid length. [ 1283.045721][T23696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5063'. [ 1283.073003][T23691] netlink: 'syz.1.5066': attribute type 12 has an invalid length. [ 1283.098747][T23691] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5066'. [ 1283.234215][T23699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1283.241966][T23699] IPv6: NLM_F_CREATE should be set when creating new route [ 1283.249649][T23699] IPv6: NLM_F_CREATE should be set when creating new route [ 1283.257376][T23699] IPv6: NLM_F_CREATE should be set when creating new route [ 1283.342727][T23699] netlink: 'syz.2.5068': attribute type 9 has an invalid length. [ 1283.375800][T23699] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5068'. [ 1283.849166][T23702] netlink: 'syz.2.5068': attribute type 9 has an invalid length. [ 1283.857581][T23702] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5068'. [ 1284.019617][T23714] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5071'. [ 1284.405659][T23714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1284.494721][T23714] bond0 (unregistering): (slave team0): Releasing backup interface [ 1284.505872][T23714] bond0 (unregistering): Released all slaves [ 1284.531200][T23716] sit0: entered allmulticast mode [ 1284.577497][T23717] sit0: entered promiscuous mode [ 1285.099685][T23740] netlink: 'syz.1.5079': attribute type 2 has an invalid length. [ 1285.122858][T23740] netlink: 119 bytes leftover after parsing attributes in process `syz.1.5079'. [ 1285.656362][T23755] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5082'. [ 1285.816958][T23755] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5082'. [ 1285.849467][T23755] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5082'. [ 1286.537272][T23755] bond0: (slave bond_slave_0): Releasing backup interface [ 1286.572631][T23755] bond_slave_0: left promiscuous mode [ 1286.592409][T23755] bond_slave_0: left allmulticast mode [ 1286.613091][T23755] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1286.634478][T23762] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5083'. [ 1286.660209][T23774] netlink: 'syz.3.5085': attribute type 9 has an invalid length. [ 1286.777690][T23773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1286.785030][T23773] IPv6: NLM_F_CREATE should be set when creating new route [ 1286.792431][T23773] IPv6: NLM_F_CREATE should be set when creating new route [ 1286.799792][T23773] IPv6: NLM_F_CREATE should be set when creating new route [ 1286.920348][T23778] netlink: 'syz.2.5087': attribute type 3 has an invalid length. [ 1286.960293][T23778] netlink: 'syz.2.5087': attribute type 5 has an invalid length. [ 1286.988494][T23771] netlink: 'syz.3.5085': attribute type 9 has an invalid length. [ 1288.644748][T23803] validate_nla: 2 callbacks suppressed [ 1288.644767][T23803] netlink: 'syz.3.5094': attribute type 21 has an invalid length. [ 1288.710052][T23803] __nla_validate_parse: 5 callbacks suppressed [ 1288.710070][T23803] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5094'. [ 1288.975518][T23814] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5097'. [ 1289.260189][T23821] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5097'. [ 1289.308001][T23821] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5097'. [ 1289.365814][T23821] bond0: (slave bond_slave_0): Releasing backup interface [ 1289.514568][T23821] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1292.856342][T23831] mac80211_hwsim hwsim58 wlan0: entered promiscuous mode [ 1292.866844][T23831] mac80211_hwsim hwsim58 wlan0: entered allmulticast mode [ 1293.465188][T23840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1293.473128][T23840] IPv6: NLM_F_CREATE should be set when creating new route [ 1293.481360][T23840] IPv6: NLM_F_CREATE should be set when creating new route [ 1293.489208][T23840] IPv6: NLM_F_CREATE should be set when creating new route [ 1293.574909][T23840] netlink: 'syz.1.5102': attribute type 9 has an invalid length. [ 1293.584765][T23840] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5102'. [ 1293.661228][T23850] netlink: 'syz.0.5106': attribute type 13 has an invalid length. [ 1293.677796][T23850] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5106'. [ 1293.705119][T23850] erspan0: refused to change device tx_queue_len [ 1294.108069][T23846] netlink: 'syz.1.5102': attribute type 9 has an invalid length. [ 1294.115913][T23846] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5102'. [ 1294.543684][T23861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.551795][T23861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.573790][T23861] bridge0: entered allmulticast mode [ 1294.648556][T23865] netlink: 'syz.3.5109': attribute type 21 has an invalid length. [ 1294.673485][T23863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1295.172251][T23873] netlink: 'syz.3.5112': attribute type 9 has an invalid length. [ 1295.188033][T23873] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5112'. [ 1295.980649][T23893] netlink: 4065 bytes leftover after parsing attributes in process `syz.1.5118'. [ 1296.060897][T23893] netlink: 4065 bytes leftover after parsing attributes in process `syz.1.5118'. [ 1296.179505][T23891] netlink: 4065 bytes leftover after parsing attributes in process `syz.1.5118'. [ 1296.245151][T23900] sit0: entered allmulticast mode [ 1296.303288][T23896] netlink: 4065 bytes leftover after parsing attributes in process `syz.1.5118'. [ 1296.318756][T23887] sit0: entered promiscuous mode [ 1296.660336][T23891] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5118'. [ 1297.176150][T23911] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5122'. [ 1297.190624][T23918] netlink: 'syz.1.5125': attribute type 14 has an invalid length. [ 1297.199841][T23918] netlink: 56815 bytes leftover after parsing attributes in process `syz.1.5125'. [ 1297.276081][T23911] openvswitch: netlink: Flow key attribute not present in set flow. [ 1300.295843][T23938] netlink: 'syz.2.5128': attribute type 13 has an invalid length. [ 1300.313757][T23938] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5128'. [ 1300.331275][T23938] erspan0: refused to change device tx_queue_len [ 1300.631739][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.640787][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.755608][T23953] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.5132'. [ 1301.335015][T23971] netlink: 'syz.1.5137': attribute type 29 has an invalid length. [ 1301.422053][T23977] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5138'. [ 1301.467349][T23977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.601621][T23977] bridge_slave_0 (unregistering): left allmulticast mode [ 1301.620796][T23977] bridge_slave_0 (unregistering): left promiscuous mode [ 1301.655680][T23977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.708856][T23971] netlink: 'syz.1.5137': attribute type 29 has an invalid length. [ 1301.745983][T23976] netlink: 'syz.1.5137': attribute type 29 has an invalid length. [ 1301.797696][T23978] netlink: 'syz.1.5137': attribute type 29 has an invalid length. [ 1301.827498][T23979] netlink: 'syz.1.5137': attribute type 29 has an invalid length. [ 1302.194065][T23989] netlink: 'syz.3.5141': attribute type 10 has an invalid length. [ 1302.305932][T23997] netlink: 'syz.3.5141': attribute type 3 has an invalid length. [ 1302.315539][T23997] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5141'. [ 1303.230696][T23989] team0: Port device wlan1 added [ 1303.298413][T23999] lo: entered allmulticast mode [ 1303.449919][T24009] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5147'. [ 1305.206722][T24063] netlink: 'syz.3.5160': attribute type 10 has an invalid length. [ 1305.368568][T24063] team0: Port device netdevsim0 added [ 1305.377097][T24071] netlink: 'syz.0.5159': attribute type 3 has an invalid length. [ 1305.420416][T24071] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5159'. [ 1305.453978][T24064] netlink: 'syz.3.5160': attribute type 10 has an invalid length. [ 1305.555341][T24064] team0: Port device netdevsim0 removed [ 1305.579455][T24064] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1305.607665][T24064] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1305.617229][T24064] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1305.640973][T24068] netlink: 'syz.0.5159': attribute type 10 has an invalid length. [ 1305.693171][T24068] team0: Port device wlan1 added [ 1306.687469][T24096] netlink: 'syz.3.5168': attribute type 21 has an invalid length. [ 1307.719368][T24127] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.5177'. [ 1308.046736][T24138] netlink: 'syz.2.5180': attribute type 10 has an invalid length. [ 1308.102145][T24142] netlink: 'syz.2.5180': attribute type 3 has an invalid length. [ 1308.143209][T24142] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5180'. [ 1308.377047][T24138] team0: Port device wlan1 added [ 1309.585729][T24189] netlink: 'syz.1.5193': attribute type 10 has an invalid length. [ 1309.594632][T24189] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5193'. [ 1309.973945][T24200] netlink: 'syz.1.5197': attribute type 10 has an invalid length. [ 1310.087657][T24205] netlink: 'syz.1.5197': attribute type 3 has an invalid length. [ 1310.095597][T24205] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5197'. [ 1310.233211][T24200] team0: Port device wlan1 added [ 1310.261352][T24203] netlink: 'syz.3.5196': attribute type 33 has an invalid length. [ 1310.286934][T24204] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.5196'. [ 1310.317702][T24203] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5196'. [ 1310.818632][T24223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5203'. [ 1311.124461][T24223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.323955][T24223] bridge_slave_0 (unregistering): left allmulticast mode [ 1311.342072][T24223] bridge_slave_0 (unregistering): left promiscuous mode [ 1311.355930][T24223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.799467][T24243] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.5209'. [ 1311.824898][T24246] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.5209'. [ 1311.912788][T24241] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5208'. [ 1312.036942][T24249] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5208'. [ 1312.118602][T24249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1312.387550][T24250] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5210'. [ 1312.592592][T24260] syzkaller0: entered promiscuous mode [ 1312.654212][T24260] syzkaller0: entered allmulticast mode [ 1315.254713][T24277] syzkaller0: entered promiscuous mode [ 1315.301477][T24277] syzkaller0: entered allmulticast mode [ 1315.312907][T24280] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5216'. [ 1315.472551][T24280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.194896][T24287] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5218'. [ 1316.257919][T24280] bridge_slave_0 (unregistering): left allmulticast mode [ 1316.265368][T24280] bridge_slave_0 (unregistering): left promiscuous mode [ 1316.311045][T24280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.879960][T24292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1317.214884][T24298] netlink: 'syz.1.5221': attribute type 21 has an invalid length. [ 1317.308691][T24299] netlink: 'syz.1.5221': attribute type 21 has an invalid length. [ 1317.826411][T24293] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5219'. [ 1319.716522][T24311] syzkaller0: entered promiscuous mode [ 1319.743118][T24311] syzkaller0: entered allmulticast mode [ 1319.809609][T24318] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5227'. [ 1319.984353][T24318] team0: Port device dummy0 removed [ 1320.461710][T24329] netlink: 'syz.3.5230': attribute type 3 has an invalid length. [ 1320.504344][T24329] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5230'. [ 1323.021226][T24344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5234'. [ 1323.035137][T24344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5234'. [ 1323.058326][T24346] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5234'. [ 1323.070669][T24348] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.5235'. [ 1323.080671][T24348] netlink: zone id is out of range [ 1323.085987][T24348] netlink: zone id is out of range [ 1323.096657][T24348] netlink: zone id is out of range [ 1323.113460][T24348] netlink: zone id is out of range [ 1323.121271][T24348] netlink: zone id is out of range [ 1323.126455][T24348] netlink: zone id is out of range [ 1323.136774][T24348] netlink: zone id is out of range [ 1323.144976][T24348] netlink: zone id is out of range [ 1323.154342][T24348] netlink: zone id is out of range [ 1323.164612][T24348] netlink: zone id is out of range [ 1323.193329][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 1323.625160][T24372] netlink: 'syz.1.5242': attribute type 10 has an invalid length. [ 1323.647593][T24372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.721305][T24372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.728748][T24372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1323.754694][T24372] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1324.073505][T24388] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5248'. [ 1324.114400][T24384] sit0: left promiscuous mode [ 1324.447968][T24393] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5249'. [ 1324.467806][T24397] sit0: entered promiscuous mode [ 1327.326426][T24423] netlink: 'syz.1.5256': attribute type 16 has an invalid length. [ 1327.344936][T24423] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5256'. [ 1328.115562][T24431] netlink: 'syz.2.5259': attribute type 2 has an invalid length. [ 1328.166258][T24431] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5259'. [ 1328.547559][T24443] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.5263'. [ 1328.832408][T24446] syzkaller0: entered promiscuous mode [ 1328.877474][T24446] syzkaller0: entered allmulticast mode [ 1328.902838][T24456] bridge0: entered promiscuous mode [ 1328.908355][T24456] bridge0: entered allmulticast mode [ 1328.915907][T24455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.928760][T24455] bridge0: left promiscuous mode [ 1329.155225][T24469] IPv6: NLM_F_CREATE should be specified when creating new route [ 1330.291166][T24485] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.5275'. [ 1330.340426][T24485] net_ratelimit: 239 callbacks suppressed [ 1330.340641][T24485] netlink: del zone limit has 8 unknown bytes [ 1330.753811][T24497] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5277'. [ 1333.092576][T24493] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5278'. [ 1333.104285][T24499] veth1_vlan: entered allmulticast mode [ 1333.292159][T24510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.299465][T24510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.307111][T24510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.314407][T24510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.328738][T24510] bridge0: entered promiscuous mode [ 1333.370194][T24508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1333.507237][T24522] netlink: 'syz.2.5283': attribute type 10 has an invalid length. [ 1333.523412][T24522] bridge0: left promiscuous mode [ 1333.531337][T24522] bridge0: left allmulticast mode [ 1333.571393][T24522] bridge0: entered promiscuous mode [ 1333.576996][T24522] bridge0: entered allmulticast mode [ 1333.594155][T24522] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1333.636903][T24525] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.5284'. [ 1333.869775][T24534] netlink: 'syz.0.5287': attribute type 3 has an invalid length. [ 1333.882768][T24534] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5287'. [ 1333.913693][T24534] netlink: 'syz.0.5287': attribute type 10 has an invalid length. [ 1333.922436][T24534] netlink: 'syz.0.5287': attribute type 4 has an invalid length. [ 1333.931168][T24534] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5287'. [ 1333.961952][T24534] wlan1: mtu greater than device maximum [ 1334.001102][T24534] team0: Device wlan1 failed to change mtu [ 1335.293839][T24561] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.5293'. [ 1335.455948][T24567] syzkaller0: entered promiscuous mode [ 1335.465523][T24567] syzkaller0: entered allmulticast mode [ 1336.064104][T24587] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5302'. [ 1336.203721][T24579] netlink: 'syz.3.5301': attribute type 3 has an invalid length. [ 1336.217512][T24579] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5301'. [ 1336.228094][T24582] netlink: 'syz.3.5301': attribute type 10 has an invalid length. [ 1336.242761][T24582] netlink: 'syz.3.5301': attribute type 4 has an invalid length. [ 1336.256421][T24582] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5301'. [ 1336.294852][T24582] wlan1: mtu greater than device maximum [ 1336.302456][T24582] team0: Device wlan1 failed to change mtu [ 1336.393611][T24591] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.5303'. [ 1337.090468][T24620] netlink: 'syz.0.5313': attribute type 29 has an invalid length. [ 1337.132525][T24620] netlink: 'syz.0.5313': attribute type 29 has an invalid length. [ 1337.537903][T24627] netlink: 'syz.2.5314': attribute type 10 has an invalid length. [ 1337.557880][T24627] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5314'. [ 1337.576346][T24627] hsr0: entered promiscuous mode [ 1337.583848][T24627] bridge0: port 1(hsr0) entered blocking state [ 1337.591627][T24627] bridge0: port 1(hsr0) entered disabled state [ 1337.611720][T24627] hsr0: entered allmulticast mode [ 1337.617511][T24627] hsr_slave_0: entered allmulticast mode [ 1337.624920][T24627] hsr_slave_1: entered allmulticast mode [ 1337.696385][T24627] bridge0: port 1(hsr0) entered blocking state [ 1337.705571][T24627] bridge0: port 1(hsr0) entered forwarding state [ 1338.205539][T24639] netlink: 22 bytes leftover after parsing attributes in process `syz.0.5318'. [ 1340.291339][T24680] netlink: 'syz.3.5327': attribute type 10 has an invalid length. [ 1340.325475][T24680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1340.382640][T24681] netlink: 'syz.0.5330': attribute type 1 has an invalid length. [ 1340.391806][T24681] netlink: 'syz.0.5330': attribute type 3 has an invalid length. [ 1340.410613][T24680] team0: Port device batadv0 added [ 1340.422933][T24681] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5330'. [ 1340.512555][T24684] netlink: 'syz.0.5330': attribute type 10 has an invalid length. [ 1340.512592][T24684] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5330'. [ 1341.329580][T24696] netlink: 'syz.2.5334': attribute type 23 has an invalid length. [ 1342.048403][T24709] netlink: 'syz.0.5338': attribute type 29 has an invalid length. [ 1342.076269][T24709] netlink: 'syz.0.5338': attribute type 29 has an invalid length. [ 1342.339716][T24731] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5342'. [ 1342.603804][T24741] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5344'. [ 1343.237719][T24741] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5344'. [ 1345.215472][T24792] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5359'. [ 1345.247495][T24792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1345.957628][T24815] netlink: 'syz.0.5367': attribute type 21 has an invalid length. [ 1345.988150][T24815] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5367'. [ 1346.915275][T24833] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.5372'. [ 1347.154065][T24842] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.5374'. [ 1347.187461][T24842] netlink: 13296 bytes leftover after parsing attributes in process `syz.3.5374'. [ 1347.196748][T24842] tipc: Started in network mode [ 1347.207657][T24842] tipc: Node identity b, cluster identity 57 [ 1347.219399][T24842] tipc: Node number set to 11 [ 1347.395556][T24848] netlink: 'syz.1.5375': attribute type 10 has an invalid length. [ 1347.432998][T24848] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5375'. [ 1348.247246][T24864] netlink: 'syz.0.5379': attribute type 29 has an invalid length. [ 1348.679763][T24864] netlink: 'syz.0.5379': attribute type 29 has an invalid length. [ 1348.691634][T24865] netlink: 'syz.0.5379': attribute type 29 has an invalid length. [ 1348.727174][T24866] netlink: 'syz.0.5379': attribute type 29 has an invalid length. [ 1348.746650][T24867] netlink: 'syz.0.5379': attribute type 29 has an invalid length. [ 1348.787930][T24868] netlink: 'syz.0.5379': attribute type 29 has an invalid length. [ 1348.797876][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 1348.892656][T24878] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.5382'. [ 1349.039835][T24882] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5384'. [ 1349.067724][T24882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1349.097506][T24883] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5384'. [ 1349.126776][T24883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1349.142934][T24885] ref_ctr_offset mismatch. inode: 0x1d7 offset: 0x0 ref_ctr_offset(old): 0x8c ref_ctr_offset(new): 0x0 [ 1349.576108][T24903] syzkaller0: entered promiscuous mode [ 1349.601458][T24903] syzkaller0: entered allmulticast mode [ 1352.320773][T24968] netlink: 'syz.2.5407': attribute type 10 has an invalid length. [ 1352.337380][T24968] netlink: 'syz.2.5407': attribute type 10 has an invalid length. [ 1352.357350][T24968] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.5407'. [ 1352.369362][T24968] openvswitch: netlink: Message has 4 unknown bytes. [ 1352.417928][T24972] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1352.438778][T24975] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1353.052181][T24993] netlink: 'syz.0.5414': attribute type 21 has an invalid length. [ 1353.728526][T25004] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5417'. [ 1354.144806][T25022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1354.955871][T25046] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5428'. [ 1357.092395][T25058] netlink: 668 bytes leftover after parsing attributes in process `syz.2.5432'. [ 1357.127879][T25058] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1357.155525][T25058] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1357.448168][T25074] syzkaller0: entered promiscuous mode [ 1357.457460][T25074] syzkaller0: entered allmulticast mode [ 1360.676025][T25097] netlink: 'syz.2.5441': attribute type 30 has an invalid length. [ 1362.081357][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.096793][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.694125][T25095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5440'. [ 1362.707601][T25101] netlink: 22 bytes leftover after parsing attributes in process `syz.1.5443'. [ 1362.854736][T25108] netlink: 'syz.2.5444': attribute type 11 has an invalid length. [ 1362.874626][T25108] netlink: 212788 bytes leftover after parsing attributes in process `syz.2.5444'. [ 1363.205212][T25125] netlink: 'syz.0.5449': attribute type 25 has an invalid length. [ 1363.222551][T25125] netlink: 'syz.0.5449': attribute type 3 has an invalid length. [ 1363.237447][T25125] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5449'. [ 1363.355380][T25130] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5451'. [ 1364.179302][T25154] netlink: 'syz.0.5456': attribute type 10 has an invalid length. [ 1364.191132][T25154] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5456'. [ 1365.419650][T25171] netlink: 'syz.2.5463': attribute type 10 has an invalid length. [ 1367.331213][T25171] syz_tun: entered promiscuous mode [ 1367.367014][T25171] syz_tun: entered allmulticast mode [ 1367.388353][T25171] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1367.402168][T25173] netlink: 'syz.2.5463': attribute type 10 has an invalid length. [ 1367.415722][T25173] bond0: left promiscuous mode [ 1367.425847][T25173] bond_slave_1: left promiscuous mode [ 1367.432588][T25173] bridge_slave_1: left promiscuous mode [ 1367.444667][T25173] bridge0: left promiscuous mode [ 1367.450932][T25173] bond0: left allmulticast mode [ 1367.456067][T25173] bond_slave_1: left allmulticast mode [ 1367.467151][T25173] bridge_slave_1: left allmulticast mode [ 1367.473704][T25173] bridge0: left allmulticast mode [ 1367.483755][T25173] syz_tun: left allmulticast mode [ 1367.518446][T25173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1367.532413][T25173] team0: Port device bond0 added [ 1367.849482][T25183] netlink: 'syz.1.5465': attribute type 21 has an invalid length. [ 1367.858109][T25183] IPv6: NLM_F_CREATE should be specified when creating new route [ 1367.878444][T25183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1367.886149][T25183] IPv6: NLM_F_CREATE should be set when creating new route [ 1367.894500][T25183] IPv6: NLM_F_CREATE should be set when creating new route [ 1367.902416][T25183] IPv6: NLM_F_CREATE should be set when creating new route [ 1368.471369][T25204] sit0: left promiscuous mode [ 1369.269567][T22039] Bluetooth: hci4: command 0x0406 tx timeout [ 1370.670864][T25234] vlan0: entered promiscuous mode [ 1370.676299][T25234] vlan0: entered allmulticast mode [ 1370.707686][T25234] veth0_vlan: entered allmulticast mode [ 1371.169397][T25249] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5478'. [ 1371.179469][T25249] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5478'. [ 1371.194807][T25239] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5478'. [ 1371.246015][T25239] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5478'. [ 1371.779234][T25263] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.5484'. [ 1371.910567][T25266] netlink: 'syz.3.5486': attribute type 10 has an invalid length. [ 1372.022231][T25266] team0: Device hsr_slave_0 failed to register rx_handler [ 1372.205678][T25273] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5487'. [ 1373.318344][T25302] netlink: 'syz.3.5494': attribute type 29 has an invalid length. [ 1373.328346][T25302] netlink: 'syz.3.5494': attribute type 29 has an invalid length. [ 1373.449866][T25306] netlink: 1039 bytes leftover after parsing attributes in process `syz.0.5495'. [ 1374.810483][T25347] netlink: 'syz.2.5506': attribute type 5 has an invalid length. [ 1374.979579][T25351] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5504'. [ 1374.992068][T25347] netlink: 'syz.2.5506': attribute type 10 has an invalid length. [ 1375.017808][T25347] netlink: 'syz.2.5506': attribute type 11 has an invalid length. [ 1375.033641][T25347] netlink: 'syz.2.5506': attribute type 11 has an invalid length. [ 1375.057684][T25351] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5504'. [ 1375.067076][T25347] netlink: 'syz.2.5506': attribute type 11 has an invalid length. [ 1375.089240][T25347] netlink: 'syz.2.5506': attribute type 11 has an invalid length. [ 1375.098096][T25334] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5504'. [ 1375.119865][T25347] netlink: 'syz.2.5506': attribute type 11 has an invalid length. [ 1375.147623][T25347] netlink: 'syz.2.5506': attribute type 11 has an invalid length. [ 1375.187636][T25347] netlink: 'syz.2.5506': attribute type 11 has an invalid length. [ 1375.215032][T25347] netlink: 'syz.2.5506': attribute type 11 has an invalid length. [ 1375.279640][T25347] netlink: 'syz.2.5506': attribute type 11 has an invalid length. [ 1375.318639][T25347] netlink: 'syz.2.5506': attribute type 11 has an invalid length. [ 1375.387955][T25347] netlink: 'syz.2.5506': attribute type 4 has an invalid length. [ 1375.410699][T25347] netlink: 'syz.2.5506': attribute type 5 has an invalid length. [ 1375.818497][T25365] netlink: 'syz.1.5512': attribute type 10 has an invalid length. [ 1377.014105][T25389] __nla_validate_parse: 3 callbacks suppressed [ 1377.014127][T25389] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5519'. [ 1377.085058][T25389] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1380.199881][T25455] syz.1.5536[25455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1380.200162][T25455] syz.1.5536[25455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1380.933167][T25472] netlink: 'syz.3.5541': attribute type 29 has an invalid length. [ 1381.035818][T25469] syzkaller0: entered promiscuous mode [ 1381.052391][T25469] syzkaller0: entered allmulticast mode [ 1381.069163][T25472] netlink: 'syz.3.5541': attribute type 29 has an invalid length. [ 1384.627500][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 1384.923406][T25487] netlink: 'syz.0.5544': attribute type 10 has an invalid length. [ 1384.937927][T25490] netlink: 'syz.0.5544': attribute type 21 has an invalid length. [ 1385.166412][T25500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1385.179850][T25504] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5549'. [ 1385.323039][T25511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1385.412386][T25511] netlink: 'syz.2.5551': attribute type 9 has an invalid length. [ 1385.425436][T25511] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5551'. [ 1385.774088][T25519] netlink: 'syz.2.5551': attribute type 9 has an invalid length. [ 1385.792046][T25519] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5551'. [ 1386.589589][T25551] netlink: 'syz.1.5560': attribute type 9 has an invalid length. [ 1386.598942][T25551] netlink: 399 bytes leftover after parsing attributes in process `syz.1.5560'. [ 1387.449122][T25582] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5572'. [ 1387.839656][T25581] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.5573'. [ 1390.819160][T25646] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5592'. [ 1391.152652][T25651] netlink: 'syz.3.5594': attribute type 17 has an invalid length. [ 1391.197627][T25651] netlink: 'syz.3.5594': attribute type 16 has an invalid length. [ 1391.223110][T25651] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5594'. [ 1391.392050][T25657] netlink: 'syz.0.5596': attribute type 27 has an invalid length. [ 1391.439965][T25657] netlink: 'syz.0.5596': attribute type 25 has an invalid length. [ 1391.756683][T25660] netlink: 'syz.2.5593': attribute type 10 has an invalid length. [ 1391.828774][T25660] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5593'. [ 1391.875045][T25660] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 1391.934366][T25660] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1391.992685][T25660] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 1392.017520][T25674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5597'. [ 1392.026615][T25674] : renamed from caif0 [ 1393.961066][T25674] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1394.147728][T25679] tap0: tun_chr_ioctl cmd 1074025698 [ 1394.866043][T25706] netlink: 'syz.1.5609': attribute type 4 has an invalid length. [ 1394.887421][T25706] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5609'. [ 1394.918462][T25706] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1395.068656][T25715] netlink: 'syz.2.5611': attribute type 21 has an invalid length. [ 1395.328452][T25724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1396.194206][T25733] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5617'. [ 1396.755646][T25752] netlink: 'syz.0.5624': attribute type 10 has an invalid length. [ 1396.843616][T25752] team0 (unregistering): Port device team_slave_0 removed [ 1396.940297][T25752] team0 (unregistering): Port device team_slave_1 removed [ 1399.785903][T25752] team0 (unregistering): Port device wlan1 removed [ 1399.866380][T25764] netlink: 'syz.3.5626': attribute type 4 has an invalid length. [ 1400.263078][T25775] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5631'. [ 1400.802875][T25796] netlink: 'syz.2.5634': attribute type 21 has an invalid length. [ 1400.834737][T25794] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5636'. [ 1402.808970][T25844] netlink: 'syz.2.5652': attribute type 29 has an invalid length. [ 1402.830205][T25844] netlink: 'syz.2.5652': attribute type 29 has an invalid length. [ 1403.127417][T25837] netlink: 'syz.1.5648': attribute type 10 has an invalid length. [ 1403.160894][T25837] team0: Device ipvlan1 failed to register rx_handler [ 1403.324414][T25853] netlink: 'syz.0.5654': attribute type 10 has an invalid length. [ 1403.344466][T25853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5654'. [ 1404.379037][T25870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5660'. [ 1406.139975][T25882] b‹¡Y­™4��`Ò˜: renamed from lo (while UP) [ 1406.194491][T25879] netlink: 'syz.1.5661': attribute type 27 has an invalid length. [ 1406.236474][T25879] netlink: 'syz.1.5661': attribute type 4 has an invalid length. [ 1406.245539][T25879] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5661'. [ 1406.470031][T25892] netlink: 'syz.3.5665': attribute type 3 has an invalid length. [ 1406.490586][T25892] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5665'. [ 1407.194312][T25913] netlink: 'syz.3.5670': attribute type 21 has an invalid length. [ 1407.298140][T25913] netlink: 'syz.3.5670': attribute type 1 has an invalid length. [ 1407.306704][T25913] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5670'. [ 1407.379454][T25909] netlink: 'syz.2.5669': attribute type 22 has an invalid length. [ 1407.440617][T25909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5669'. [ 1409.328937][T25913] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1409.725496][T25913] syzkaller0: entered promiscuous mode [ 1409.734564][T25913] syzkaller0: entered allmulticast mode [ 1409.804750][T25920] netlink: 'syz.1.5671': attribute type 10 has an invalid length. [ 1410.507921][T25954] netlink: 'syz.0.5679': attribute type 21 has an invalid length. [ 1410.607838][T25954] IPv6: NLM_F_CREATE should be specified when creating new route [ 1410.652099][T25954] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1410.659542][T25954] IPv6: NLM_F_CREATE should be set when creating new route [ 1410.666946][T25954] IPv6: NLM_F_CREATE should be set when creating new route [ 1410.674259][T25954] IPv6: NLM_F_CREATE should be set when creating new route [ 1411.072353][T25977] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5684'. [ 1414.746987][T22039] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1415.082494][T26034] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.5699'. [ 1415.480257][T26041] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.5701'. [ 1421.019640][T26119] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5719'. [ 1421.423969][T26138] netlink: 'syz.1.5726': attribute type 20 has an invalid length. [ 1421.447699][T26139] netlink: 'syz.1.5726': attribute type 20 has an invalid length. [ 1421.751809][T26153] netlink: 'syz.1.5730': attribute type 9 has an invalid length. [ 1421.787504][T26153] netlink: 153604 bytes leftover after parsing attributes in process `syz.1.5730'. [ 1422.205978][T26167] netlink: 135056 bytes leftover after parsing attributes in process `syz.2.5732'. [ 1422.230632][T26167] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 1422.645697][T24969] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 1422.654080][T26183] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1422.658618][T24969] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1423.125938][T26193] netlink: 'syz.3.5741': attribute type 1 has an invalid length. [ 1423.134831][T26193] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.5741'. [ 1423.183940][T26196] netlink: 'syz.1.5742': attribute type 10 has an invalid length. [ 1423.226018][T26196] 8021q: adding VLAN 0 to HW filter on device team0 [ 1423.242298][T26196] bond0: (slave team0): Enslaving as an active interface with an up link [ 1423.512438][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.520246][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.613041][T26208] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5745'. [ 1423.871902][T26216] syzkaller0: entered promiscuous mode [ 1423.880555][T26216] syzkaller0: entered allmulticast mode [ 1424.122224][T26224] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5750'. [ 1424.308075][T26235] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.5753'. [ 1427.727313][T26231] netlink: 'syz.1.5752': attribute type 10 has an invalid length. [ 1427.817578][T26235] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.5753'. [ 1427.828405][T26241] netlink: 'syz.2.5754': attribute type 11 has an invalid length. [ 1427.844869][T26245] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5755'. [ 1427.887115][T26245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1428.136344][T26255] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5755'. [ 1428.163633][T26259] netlink: 'syz.2.5759': attribute type 7 has an invalid length. [ 1428.181672][T26251] pim6reg1: tun_chr_ioctl cmd 1074025673 [ 1428.445906][T26270] netlink: 'syz.3.5762': attribute type 21 has an invalid length. [ 1428.468737][T26270] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5762'. [ 1428.505795][T26270] netlink: 'syz.3.5762': attribute type 4 has an invalid length. [ 1431.311880][T26295] netlink: 'syz.0.5769': attribute type 3 has an invalid length. [ 1431.337423][T26295] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5769'. [ 1431.407805][T26293] netlink: 'syz.2.5770': attribute type 2 has an invalid length. [ 1431.435511][T26293] netlink: 'syz.2.5770': attribute type 4 has an invalid length. [ 1431.458471][T26293] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5770'. [ 1431.742138][T26302] netlink: 'syz.2.5772': attribute type 10 has an invalid length. [ 1431.783983][T26302] vcan0: entered allmulticast mode [ 1431.811113][T26304] netlink: 'syz.1.5773': attribute type 21 has an invalid length. [ 1431.827994][T26304] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5773'. [ 1432.302540][T26322] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.5779'. [ 1432.655224][T26330] bridge_slave_1: left allmulticast mode [ 1432.674017][T26330] bridge_slave_1: left promiscuous mode [ 1432.698396][T26330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.774853][T26330] bond0: (slave bridge0): Releasing backup interface [ 1432.879670][T26350] validate_nla: 1 callbacks suppressed [ 1432.879691][T26350] netlink: 'syz.0.5783': attribute type 1 has an invalid length. [ 1432.906317][T26351] netlink: 'syz.2.5785': attribute type 3 has an invalid length. [ 1432.917813][T26350] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.5783'. [ 1432.939508][T26351] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5785'. [ 1433.306857][T26355] netlink: 'syz.1.5787': attribute type 29 has an invalid length. [ 1433.346635][T26355] netlink: 'syz.1.5787': attribute type 29 has an invalid length. [ 1433.381514][T26356] netlink: 'syz.1.5787': attribute type 29 has an invalid length. [ 1433.412961][T26355] netlink: 'syz.1.5787': attribute type 29 has an invalid length. [ 1433.462137][T26355] netlink: 'syz.1.5787': attribute type 29 has an invalid length. [ 1433.706190][T26372] netlink: 'syz.0.5793': attribute type 10 has an invalid length. [ 1433.717089][T26378] netlink: 'syz.1.5795': attribute type 1 has an invalid length. [ 1433.734493][T26378] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.5795'. [ 1433.837055][T26373] bridge0: entered promiscuous mode [ 1433.859818][T26373] bridge0: entered allmulticast mode [ 1434.162178][T26392] netlink: 'syz.2.5798': attribute type 29 has an invalid length. [ 1434.208447][T26395] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1434.215848][T26395] IPv6: NLM_F_CREATE should be set when creating new route [ 1434.223271][T26395] IPv6: NLM_F_CREATE should be set when creating new route [ 1434.230629][T26395] IPv6: NLM_F_CREATE should be set when creating new route [ 1435.082363][T26400] netlink: 6188 bytes leftover after parsing attributes in process `syz.3.5800'. [ 1436.708199][T26448] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5815'. [ 1436.736303][T26448] A link change request failed with some changes committed already. Interface b‹¡Y­™4��`Ò˜ may have been left with an inconsistent configuration, please check. [ 1437.832777][T26487] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5821'. [ 1437.933984][T26489] validate_nla: 9 callbacks suppressed [ 1437.934022][T26489] netlink: 'syz.1.5824': attribute type 10 has an invalid length. [ 1437.951084][T26489] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1438.000977][T26493] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5826'. [ 1438.182248][T26497] netlink: 'syz.2.5827': attribute type 10 has an invalid length. [ 1438.781827][T26512] veth1_to_bond: entered allmulticast mode [ 1439.262982][T26523] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5836'. [ 1440.102608][T26548] ªªªªª»: renamed from veth1_vlan (while UP) [ 1443.155379][T26573] netlink: 'syz.1.5849': attribute type 1 has an invalid length. [ 1443.183221][T26573] netlink: 'syz.1.5849': attribute type 3 has an invalid length. [ 1443.202455][T26573] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5849'. [ 1443.335119][T26578] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.5850'. [ 1444.395167][T26599] netlink: 'syz.1.5857': attribute type 21 has an invalid length. [ 1444.417496][T26599] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5857'. [ 1444.437734][T26599] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5857'. [ 1445.449498][T26642] netlink: 15478 bytes leftover after parsing attributes in process `syz.1.5868'. [ 1445.561172][T26643] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.5867'. [ 1445.578892][T26646] netlink: 'syz.2.5871': attribute type 13 has an invalid length. [ 1445.596770][T26646] netlink: 'syz.2.5871': attribute type 58 has an invalid length. [ 1445.605650][T26646] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5871'. [ 1445.620777][T26643] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.5867'. [ 1445.640756][T26647] netlink: 'syz.3.5872': attribute type 3 has an invalid length. [ 1445.649082][T26643] tipc: Started in network mode [ 1445.654056][T26643] tipc: Node identity b, cluster identity 73 [ 1445.660713][T26647] netlink: 'syz.3.5872': attribute type 4 has an invalid length. [ 1445.675124][T26647] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5872'. [ 1445.687439][T26643] tipc: Node number set to 11 [ 1447.103743][T26671] netlink: 'syz.3.5879': attribute type 10 has an invalid length. [ 1447.530448][T26672] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5878'. [ 1448.410793][T26690] netlink: 'syz.3.5884': attribute type 21 has an invalid length. [ 1448.419851][T26691] sock: sock_set_timeout: `syz.0.5883' (pid 26691) tries to set negative timeout [ 1448.447836][T26690] netlink: 'syz.3.5884': attribute type 4 has an invalid length. [ 1450.920916][T26733] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1451.291144][T26749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1451.320820][T26749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1451.344675][T26749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1451.359544][T26749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1451.701978][T26760] netlink: 'syz.3.5900': attribute type 10 has an invalid length. [ 1451.719887][T26760] netlink: 'syz.3.5900': attribute type 16 has an invalid length. [ 1451.737431][T26760] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5900'. [ 1451.851091][T26766] netlink: 'syz.2.5901': attribute type 10 has an invalid length. [ 1451.880434][T26766] netlink: 'syz.2.5901': attribute type 16 has an invalid length. [ 1451.897433][T26766] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5901'. [ 1451.931856][T26763] netlink: 'syz.1.5902': attribute type 2 has an invalid length. [ 1451.968741][T26763] netlink: 119 bytes leftover after parsing attributes in process `syz.1.5902'. [ 1452.012800][T26775] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5904'. [ 1452.501303][T26798] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5910'. [ 1453.481533][T26819] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.5916'. [ 1453.526742][T26819] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5916'. [ 1453.548931][T26819] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1453.558452][T26819] CPU: 0 PID: 26819 Comm: syz.0.5916 Not tainted syzkaller #0 [ 1453.566013][T26819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1453.576146][T26819] Call Trace: [ 1453.579484][T26819] [ 1453.582478][T26819] dump_stack_lvl+0x18c/0x250 [ 1453.587250][T26819] ? show_regs_print_info+0x20/0x20 [ 1453.592561][T26819] ? load_image+0x420/0x420 [ 1453.597175][T26819] sysfs_warn_dup+0x8e/0xa0 [ 1453.601802][T26819] sysfs_do_create_link_sd+0xc0/0x110 [ 1453.607262][T26819] device_add_class_symlinks+0x1cf/0x240 [ 1453.613045][T26819] device_add+0x4f9/0xc40 [ 1453.617478][T26819] wiphy_register+0x1d99/0x2ac0 [ 1453.622575][T26819] ? cfg80211_event_work+0x40/0x40 [ 1453.627780][T26819] ? minstrel_ht_alloc+0x88a/0x990 [ 1453.633116][T26819] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1453.639366][T26819] ieee80211_register_hw+0x2dd8/0x3b30 [ 1453.644994][T26819] ? ieee80211_register_hw+0xf71/0x3b30 [ 1453.650645][T26819] ? ieee80211_tasklet_handler+0x20/0x20 [ 1453.656349][T26819] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1453.662404][T26819] ? __debug_object_init+0xec/0x450 [ 1453.667696][T26819] ? __asan_memset+0x22/0x40 [ 1453.672368][T26819] ? __hrtimer_init+0x189/0x270 [ 1453.677297][T26819] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1453.683152][T26819] ? mac80211_hwsim_free+0x220/0x220 [ 1453.688487][T26819] ? rcu_is_watching+0x15/0xb0 [ 1453.693311][T26819] ? kstrndup+0xbd/0x140 [ 1453.697627][T26819] hwsim_new_radio_nl+0xdad/0x1a70 [ 1453.702795][T26819] ? __nla_validate+0x50/0x50 [ 1453.707549][T26819] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1453.713948][T26819] ? __nla_parse+0x40/0x50 [ 1453.718432][T26819] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1453.724851][T26819] genl_family_rcv_msg_doit+0x21a/0x310 [ 1453.730476][T26819] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1453.736431][T26819] ? bpf_lsm_capable+0x9/0x10 [ 1453.741167][T26819] ? security_capable+0x89/0xb0 [ 1453.746106][T26819] genl_rcv_msg+0x611/0x7a0 [ 1453.750665][T26819] ? genl_bind+0x360/0x360 [ 1453.755128][T26819] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1453.761497][T26819] ? perf_trace_lock+0x303/0x3b0 [ 1453.766492][T26819] netlink_rcv_skb+0x235/0x4c0 [ 1453.771300][T26819] ? genl_bind+0x360/0x360 [ 1453.775765][T26819] ? netlink_ack+0x1160/0x1160 [ 1453.780600][T26819] ? __lock_acquire+0x7d80/0x7d80 [ 1453.785679][T26819] ? net_generic+0x1e/0x240 [ 1453.790321][T26819] ? down_read+0x1ac/0x2e0 [ 1453.794796][T26819] genl_rcv+0x28/0x40 [ 1453.798827][T26819] netlink_unicast+0x7b1/0x930 [ 1453.803688][T26819] netlink_sendmsg+0x8d0/0xbf0 [ 1453.808519][T26819] ? netlink_getsockopt+0x590/0x590 [ 1453.813762][T26819] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1453.819356][T26819] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1453.824682][T26819] ? security_socket_sendmsg+0x80/0xa0 [ 1453.830194][T26819] ? netlink_getsockopt+0x590/0x590 [ 1453.835446][T26819] ____sys_sendmsg+0x61b/0x980 [ 1453.840271][T26819] ? __asan_memset+0x22/0x40 [ 1453.844932][T26819] ? __sys_sendmsg_sock+0x30/0x30 [ 1453.849998][T26819] ? __import_iovec+0x5f2/0x850 [ 1453.854919][T26819] ? import_iovec+0x73/0xa0 [ 1453.859481][T26819] ___sys_sendmsg+0x2a6/0x360 [ 1453.864214][T26819] ? __sys_sendmsg+0x2b0/0x2b0 [ 1453.869061][T26819] ? trace_call_bpf+0xc3/0x6c0 [ 1453.873920][T26819] __se_sys_sendmsg+0x1d0/0x2c0 [ 1453.878814][T26819] ? perf_trace_preemptirq_template+0x269/0x330 [ 1453.885119][T26819] ? __x64_sys_sendmsg+0x80/0x80 [ 1453.890187][T26819] ? lockdep_hardirqs_on+0x98/0x150 [ 1453.895445][T26819] do_syscall_64+0x55/0xb0 [ 1453.899909][T26819] ? clear_bhb_loop+0x40/0x90 [ 1453.904636][T26819] ? clear_bhb_loop+0x40/0x90 [ 1453.909364][T26819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1453.915299][T26819] RIP: 0033:0x7f180359e0d9 [ 1453.919773][T26819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.939446][T26819] RSP: 002b:00007f180441e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1453.947916][T26819] RAX: ffffffffffffffda RBX: 00007f1803825fa0 RCX: 00007f180359e0d9 [ 1453.955935][T26819] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1453.964039][T26819] RBP: 00007f1803635024 R08: 0000000000000000 R09: 0000000000000000 [ 1453.972231][T26819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1453.980255][T26819] R13: 00007f1803826038 R14: 00007f1803825fa0 R15: 00007ffc9ac5aaa8 [ 1453.988302][T26819] [ 1454.153758][T26820] mac80211_hwsim hwsim58 wlan0: left promiscuous mode [ 1454.168023][T26820] mac80211_hwsim hwsim58 wlan0: left allmulticast mode [ 1454.194067][T26817] mac80211_hwsim hwsim58 wlan0: entered promiscuous mode [ 1454.208231][T26817] mac80211_hwsim hwsim58 wlan0: entered allmulticast mode [ 1454.610077][T26840] netlink: 'syz.2.5923': attribute type 1 has an invalid length. [ 1454.618756][T26840] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5923'. [ 1454.839988][T26849] netlink: 'syz.2.5926': attribute type 41 has an invalid length. [ 1455.303167][T26861] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5930'. [ 1455.398364][T26861] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.5930'. [ 1455.553781][T26867] netlink: 'syz.0.5932': attribute type 153 has an invalid length. [ 1456.244162][T26898] netlink: 'syz.2.5940': attribute type 29 has an invalid length. [ 1456.259225][T26898] netlink: 'syz.2.5940': attribute type 29 has an invalid length. [ 1456.280560][T26898] netlink: 'syz.2.5940': attribute type 29 has an invalid length. [ 1456.389447][T26898] netlink: 'syz.2.5940': attribute type 29 has an invalid length. [ 1456.423726][T26901] netlink: 'syz.1.5941': attribute type 10 has an invalid length. [ 1456.462339][T26909] netlink: 'syz.2.5940': attribute type 29 has an invalid length. [ 1456.540451][T26908] -: renamed from syzkaller0 [ 1456.948823][T26916] __nla_validate_parse: 4 callbacks suppressed [ 1456.948844][T26916] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5943'. [ 1457.034880][T26916] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5943'. [ 1457.544724][T26935] pim6reg1: entered promiscuous mode [ 1458.168016][T26949] netlink: 'syz.3.5953': attribute type 4 has an invalid length. [ 1462.596758][T27023] validate_nla: 2 callbacks suppressed [ 1462.596923][T27023] netlink: 'syz.0.5977': attribute type 10 has an invalid length. [ 1463.746376][T27036] netlink: 'syz.1.5981': attribute type 4 has an invalid length. [ 1463.977568][T27049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5984'. [ 1464.081032][T27053] netlink: 'syz.0.5985': attribute type 19 has an invalid length. [ 1464.104742][T27053] netlink: 'syz.0.5985': attribute type 19 has an invalid length. [ 1464.273356][T27065] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.5988'. [ 1464.298457][T27065] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.5988'. [ 1464.894723][T27069] netlink: 'syz.2.5990': attribute type 22 has an invalid length. [ 1464.903509][T27069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5990'. [ 1465.137180][T27084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5993'. [ 1467.527486][T27135] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6008'. [ 1468.194991][T27152] netlink: 'syz.3.6011': attribute type 21 has an invalid length. [ 1468.237612][T27152] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.6011'. [ 1469.223407][T27159] bridge0: port 1(hsr0) entered disabled state [ 1469.257114][T27159] bridge0: left promiscuous mode [ 1471.767715][T27160] bridge0: port 1(hsr0) entered blocking state [ 1471.774021][T27160] bridge0: port 1(hsr0) entered forwarding state [ 1471.783063][T27160] bridge0: entered promiscuous mode [ 1472.046627][T27185] netlink: 'syz.2.6022': attribute type 7 has an invalid length. [ 1472.396223][T27189] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.6023'. [ 1472.719502][T27216] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.6029'. [ 1473.127989][T27229] netlink: 'syz.1.6035': attribute type 10 has an invalid length. [ 1473.140217][T27229] syz_tun: entered promiscuous mode [ 1473.315565][T27229] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1473.816762][T27240] netlink: 'syz.2.6037': attribute type 12 has an invalid length. [ 1473.825249][T27240] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6037'. [ 1473.848593][T27228] delete_channel: no stack [ 1579.527227][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1579.533906][ C1] rcu: 1-....: (10499 ticks this GP) idle=bd24/1/0x4000000000000000 softirq=104160/104160 fqs=4737 [ 1579.545845][ C1] rcu: hardirqs softirqs csw/system [ 1579.552270][ C1] rcu: number: 1344266 0 0 [ 1579.558688][ C1] rcu: cputime: 16428 36051 69 ==> 52490(ms) [ 1579.566562][ C1] rcu: (t=10501 jiffies g=141821 q=635 ncpus=2) [ 1579.572960][ C1] CPU: 1 PID: 27266 Comm: syz.2.6045 Not tainted syzkaller #0 [ 1579.580484][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1579.590593][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0 [ 1579.597493][ C1] Code: 00 4d 85 e4 75 16 e8 05 ca 0f 00 eb 15 e8 fe c9 0f 00 e8 09 b2 17 09 4d 85 e4 74 ea e8 ef c9 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 1579.617136][ C1] RSP: 0018:ffffc900001f0380 EFLAGS: 00000246 [ 1579.623239][ C1] RAX: ffffffff8177a881 RBX: 0000000000000000 RCX: ffff88807cee5a00 [ 1579.631257][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1579.639431][ C1] RBP: ffffc900001f0438 R08: ffffffff911ee5ef R09: 1ffffffff223dcbd [ 1579.647444][ C1] R10: dffffc0000000000 R11: fffffbfff223dcbe R12: 0000000000000200 [ 1579.655445][ C1] R13: 000001fb63109b96 R14: 1ffff9200003e070 R15: dffffc0000000000 [ 1579.663450][ C1] FS: 00007f5659ae56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1579.672426][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1579.679058][ C1] CR2: 00007f5659aa2ff8 CR3: 0000000077aef000 CR4: 00000000003506e0 [ 1579.687074][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1579.695086][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1579.703091][ C1] Call Trace: [ 1579.706406][ C1] [ 1579.709280][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 1579.714607][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1579.720368][ C1] ktime_get_with_offset+0x94/0x330 [ 1579.725606][ C1] netif_rx_internal+0x33d/0x4e0 [ 1579.730651][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1579.736060][ C1] ? dev_forward_skb+0x50/0x50 [ 1579.740864][ C1] ? rcu_is_watching+0x15/0xb0 [ 1579.745666][ C1] __netif_rx+0x78/0xc0 [ 1579.749855][ C1] veth_xmit+0x57a/0xa30 [ 1579.754168][ C1] ? veth_xmit+0x61/0xa30 [ 1579.758546][ C1] dev_hard_start_xmit+0x269/0x790 [ 1579.763722][ C1] ? __dev_queue_xmit+0x275/0x3630 [ 1579.768892][ C1] __dev_queue_xmit+0x198c/0x3630 [ 1579.773972][ C1] ? __dev_queue_xmit+0x275/0x3630 [ 1579.779150][ C1] ? netdev_core_pick_tx+0x370/0x370 [ 1579.784485][ C1] ? __copy_skb_header+0xa3/0x4a0 [ 1579.789553][ C1] ? __asan_memcpy+0x40/0x70 [ 1579.794205][ C1] ? __skb_clone+0x5c/0x6c0 [ 1579.798753][ C1] ? __skb_clone+0x446/0x6c0 [ 1579.803403][ C1] ? hsr_addr_subst_dest+0x313/0x7d0 [ 1579.808866][ C1] ? skb_clone+0x21f/0x370 [ 1579.813347][ C1] hsr_forward_skb+0x12a9/0x20b0 [ 1579.818342][ C1] ? hsr_forward_skb+0xb1/0x20b0 [ 1579.823317][ C1] ? prp_fill_frame_info+0x760/0x760 [ 1579.828666][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 1579.833758][ C1] ? __skb_pad+0x3f3/0x5f0 [ 1579.838225][ C1] send_hsr_supervision_frame+0x5fb/0xb90 [ 1579.844000][ C1] hsr_announce+0x198/0x350 [ 1579.848554][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1579.853968][ C1] ? hsr_announce+0x84/0x350 [ 1579.858603][ C1] ? hsr_dev_finalize+0x800/0x800 [ 1579.863685][ C1] ? lock_chain_count+0x20/0x20 [ 1579.868586][ C1] call_timer_fn+0x189/0x540 [ 1579.873219][ C1] ? hsr_dev_finalize+0x800/0x800 [ 1579.878291][ C1] ? call_timer_fn+0xd2/0x540 [ 1579.883020][ C1] ? __run_timers+0x810/0x810 [ 1579.887735][ C1] ? preempt_count_add+0x1a0/0x1a0 [ 1579.892882][ C1] ? hsr_dev_finalize+0x800/0x800 [ 1579.897945][ C1] __run_timers+0x570/0x810 [ 1579.902490][ C1] ? detach_timer+0x2b0/0x2b0 [ 1579.907216][ C1] run_timer_softirq+0x67/0xf0 [ 1579.912018][ C1] handle_softirqs+0x27d/0x820 [ 1579.916814][ C1] ? read_tsc+0x9/0x20 [ 1579.920920][ C1] ? ktime_get+0x24b/0x280 [ 1579.925369][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1579.930172][ C1] ? do_softirq+0x1a0/0x1a0 [ 1579.934705][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1579.939947][ C1] __irq_exit_rcu+0xd3/0x190 [ 1579.944570][ C1] ? irq_exit_rcu+0x20/0x20 [ 1579.949139][ C1] irq_exit_rcu+0x9/0x20 [ 1579.953409][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1579.959085][ C1] [ 1579.962041][ C1] [ 1579.965001][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1579.971019][ C1] RIP: 0010:preempt_schedule_irq+0xba/0x150 [ 1579.976948][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 6f bf 01 00 00 00 e8 d1 3b c5 f6 e8 ec 36 f6 f6 fb bf 01 00 00 00 31 b4 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 1579.996597][ C1] RSP: 0018:ffffc9000d887840 EFLAGS: 00000286 [ 1580.002714][ C1] RAX: 712a11b641e2c300 RBX: 0000000000000000 RCX: 712a11b641e2c300 [ 1580.010730][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 1580.018741][ C1] RBP: ffffc9000d8878e0 R08: ffffffff911ee517 R09: 1ffffffff223dca2 [ 1580.026747][ C1] R10: dffffc0000000000 R11: fffffbfff223dca3 R12: 0000000000000000 [ 1580.034753][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92001b10f08 [ 1580.042773][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 1580.048539][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1580.054380][ C1] irqentry_exit+0x67/0x70 [ 1580.058831][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1580.064861][ C1] RIP: 0010:sched_mm_cid_exit_signals+0x2b5/0x430 [ 1580.071326][ C1] Code: 00 00 00 9c 8f 44 24 40 f7 44 24 40 00 02 00 00 43 c6 44 2c 04 f8 75 45 f7 c3 00 02 00 00 74 01 fb 48 c7 44 24 20 0e 36 e0 45 <4b> c7 04 2c 00 00 00 00 43 c7 44 2c 08 00 00 00 00 65 48 8b 04 25 [ 1580.090960][ C1] RSP: 0018:ffffc9000d8879a0 EFLAGS: 00000206 [ 1580.097063][ C1] RAX: 712a11b641e2c300 RBX: 0000000000000282 RCX: 712a11b641e2c300 [ 1580.105065][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32a0 [ 1580.113071][ C1] RBP: ffffc9000d887a68 R08: ffffffff911ee517 R09: 1ffffffff223dca2 [ 1580.121071][ C1] R10: dffffc0000000000 R11: fffffbfff223dca3 R12: 1ffff92001b10f38 [ 1580.129075][ C1] R13: dffffc0000000000 R14: ffff88807cee6f7c R15: 1ffff110171e79fb [ 1580.137100][ C1] ? task_mm_cid_work+0x770/0x770 [ 1580.142180][ C1] ? rcu_read_lock_any_held+0xb4/0x140 [ 1580.147680][ C1] ? rcu_read_lock_bh_held+0x100/0x100 [ 1580.153176][ C1] exit_signals+0x292/0x500 [ 1580.157718][ C1] do_exit+0x601/0x2530 [ 1580.161910][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1580.167924][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1580.173679][ C1] ? put_task_struct+0xc0/0xc0 [ 1580.178482][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1580.184665][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1580.189930][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1580.196133][ C1] do_group_exit+0x22d/0x2f0 [ 1580.200780][ C1] ? _raw_spin_unlock_irq+0x29/0x50 [ 1580.206016][ C1] get_signal+0x12a6/0x1390 [ 1580.210565][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 1580.216181][ C1] ? lock_chain_count+0x20/0x20 [ 1580.221065][ C1] ? get_sigframe_size+0x20/0x20 [ 1580.226060][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1580.231380][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1580.236957][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1580.242471][ C1] do_syscall_64+0x61/0xb0 [ 1580.246916][ C1] ? clear_bhb_loop+0x40/0x90 [ 1580.251631][ C1] ? clear_bhb_loop+0x40/0x90 [ 1580.256340][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1580.262267][ C1] RIP: 0033:0x7f5658b9e0d9 [ 1580.266708][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1580.286608][ C1] RSP: 002b:00007f5659ae5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1580.295052][ C1] RAX: 0000000000000000 RBX: 00007f5658e25fa0 RCX: 00007f5658b9e0d9 [ 1580.303056][ C1] RDX: 0000200000000100 RSI: 0000000040082404 RDI: 0000000000000004 [ 1580.311056][ C1] RBP: 00007f5658c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1580.319076][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1580.327081][ C1] R13: 00007f5658e26038 R14: 00007f5658e25fa0 R15: 00007ffe902f7518 [ 1580.335096][ C1]